search

jbruinaud / WebGoatNet

WebGoat .Net for demos
0 stars 0 forks source link

CX Client_Insufficient_ClickJacking_Protection @ AddNewUser.aspx [master] #176

Open jbruinaud opened 4 years ago

jbruinaud commented 4 years ago

Client_Insufficient_ClickJacking_Protection issue exists @ AddNewUser.aspx in branch master

The application does not protect the web page AddNewUser.aspx from clickjacking attacks in legacy browsers, by using framebusting scripts.  

Severity: Low

CWE:693

Checkmarx

Lines: 1

Code (Line #1):

<%@ Page Title="" Language="C#" MasterPageFile="~/Resources/Master-Pages/Site.Master" AutoEventWireup="true" CodeBehind="AddNewUser.aspx.cs" Inherits="OWASP.WebGoat.NET.AddNewUser" %>