search

Custodela / dvna-shard-test

Damn Vulnerable NodeJS Application
MIT License
0 stars 0 forks source link

CX Missing_HSTS_Header @ routes/main.js [master] #14

Open tsunez opened 4 years ago

tsunez commented 4 years ago

Missing_HSTS_Header issue exists @ routes/main.js in branch master

The web-application does not define an HSTS header, leaving it vulnerable to attack.

Severity: Medium

CWE:346

Vulnerability details and guidance

Checkmarx

Recommended Fix

Lines: 11

Code (Line #11):

        res.render('login')