Scheme URI Detected in Content Security Policy (CSP) Directive Severity: Information Summary# Invicti detected that scheme URI was used in CSP directive. Impact# This means that scheme URI in script-src (http: or https:) allows the execution of unsafe scripts. Remediation# Replace the scheme URI with the domain that you trust. Classifications# ISO27001-A.14.2.5 Further Reading# Content Security Policy (CSP) Explained Invicti Security Insights Using Content Security Policy (CSP) to secure web applications Remote Hardware Takeover via Vulnerable Admin Software The dangers of incorrect CSP implementations Leverage Browser Security Features to Secure Your Website Vulnerability Index You can search and find all vulnerabilities Select Category Critical High Medium Low Best Practice Information OR Search Vulnerability Tags CSP Related Vulnerabilities Blind SQL Injection SQL Injection Local File Inclusion Misconfigured Access-Control-Allow-Origin Header Missing X-Frame-Options Header