Get a demo
AppSec with Zero Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo

Missing frame-ancestors in CSP Declaration

Severity: Information
Summary#

Invicti detected that frame-ancestors is missed in CSP declaration. It allows the injection of iframes. 

Remediation#

Set frame-ancestors to 'none' in CSP declaration:

Content-Security-Policy: frame-ancestors 'none'
Content-Security-Policy: frame-ancestors 'self' https://www.example.org

Classifications#
, ,

Select Category

OR

Search Vulnerability

Related Vulnerabilities

Related Articles

Build your resistance to threats. And save hundreds of hours each month.

Get a demo See how it works