Summary
Acunetix 360 detected data:
use in a CSP directive.
Impact
An attacker can bypass CSP and exploit a Cross-site Scripting vulnerability successfully by using data:
protocol.
Remediation
Remove data:
sources from your CSP directives.
Acunetix 360 detected data:
use in a CSP directive.
An attacker can bypass CSP and exploit a Cross-site Scripting vulnerability successfully by using data:
protocol.
Remove data:
sources from your CSP directives.