Scheme URI Detected in Content Security Policy (CSP) Directive

Severity: Information
Summary#

Invicti detected that scheme URI was used in CSP directive.

Impact#

This means that scheme URI in script-src (http: or https:) allows the execution of unsafe scripts.

Remediation#

Replace the scheme URI with the domain that you trust.

Classifications#
OR

Search Vulnerability

Tags

CSP

Build your resistance to threats. And save hundreds of hours each month.

Get a demo See how it works