search

tsunez / dvna

Damn Vulnerable NodeJS Application
MIT License
0 stars 0 forks source link

CX Missing_CSP_Header @ routes/main.js [master] #25

Closed tsunez closed 3 years ago

tsunez commented 3 years ago

Missing_CSP_Header issue exists @ routes/main.js in branch master

A Content Security Policy is not explicitly defined within the web-application.

Severity: Low

CWE:346

Vulnerability details and guidance

Checkmarx

Recommended Fix

Lines: 11

Code (Line #11):

        res.render('login')