search

Facetorushikesh / issue_demo

0 stars 0 forks source link

Fix DAST Issue : Strict-Transport-Security Multiple Header Entries (Non-compliant with Spec) #151

Closed Facetorushikesh closed 6 months ago

Facetorushikesh commented 6 months ago

Scan Date: Wed, 1 May 2024 01:44:12 URLs Impacted:

DAST Scan Results
CWE ID Severity Description Location Evidence Solution
319 Low The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. Method: GET
Parameter: 		Ensure that only one component in your stack: code, web server, application server, load balancer, etc. is configured to set or add a HTTP Strict-Transport-Security (HSTS) header.
Facetorushikesh commented 6 months ago

Scan Date: Wed, 1 May 2024 01:44:12 URLs Impacted:

DAST Scan Results
CWE ID Severity Description Location Evidence Solution
319 Low The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. Method: GET
Parameter: 		Ensure that only one component in your stack: code, web server, application server, load balancer, etc. is configured to set or add a HTTP Strict-Transport-Security (HSTS) header.