daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update xss-deprecated-header.yaml

patch-1
Prince Chaddha 2022-05-17 13:36:53 +05:30 committed by GitHub
parent b1833adc69
commit 7c7b0a7479
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
misconfiguration/xss-deprecated-header.yaml
View File

@ -3,12 +3,12 @@ id: xss-deprecated-header-detect
info:
name: Detect Deprecated XSS Protection Header
author: joshlarsen
severity: low
severity: info
description: Setting the XSS-Protection header is deprecated by most browsers. Setting the header to anything other than `0` can actually introduce an XSS vulnerability.
reference:
- https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection
- https://owasp.org/www-project-secure-headers/#x-xss-protection
tags: xss,misconfig
tags: xss,misconfig,generic
requests:
- method: GET