daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update xss-deprecated-header.yaml

patch-1
Prince Chaddha 2022-05-17 13:36:53 +05:30 committed by GitHub
parent b1833adc69
commit 7c7b0a7479
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
misconfiguration/xss-deprecated-header.yaml
View File

@ -3,12 +3,12 @@ id: xss-deprecated-header-detect
info: info:
name: Detect Deprecated XSS Protection Header name: Detect Deprecated XSS Protection Header
author: joshlarsen author: joshlarsen
severity: low severity: info
description: Setting the XSS-Protection header is deprecated by most browsers. Setting the header to anything other than `0` can actually introduce an XSS vulnerability. description: Setting the XSS-Protection header is deprecated by most browsers. Setting the header to anything other than `0` can actually introduce an XSS vulnerability.
reference: reference:
- https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection - https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection
- https://owasp.org/www-project-secure-headers/#x-xss-protection - https://owasp.org/www-project-secure-headers/#x-xss-protection
tags: xss,misconfig tags: xss,misconfig,generic
requests: requests:
- method: GET - method: GET
@ -33,4 +33,4 @@ requests:
- type: kval - type: kval
part: header part: header
kval: kval:
- x_xss_protection - x_xss_protection