smmclaughlin / CxFlowBodgeit

0 stars 0 forks source link

CX Missing_HSTS_Header @ root/about.jsp [master] #12

Open smmclaughlin opened 3 years ago

smmclaughlin commented 3 years ago

Missing_HSTS_Header issue exists @ root/about.jsp in branch master

The web-application does not define an HSTS header, leaving it vulnerable to attack.

Severity: Medium

CWE:346

Checkmarx

Training Recommended Fix

Lines: 1


Code (Line #1):

<jsp:include page="/header.jsp"/>

smmclaughlin commented 3 years ago

Issue still exists.