News & Articles

Our articles and guides on how to protect your startup from cybercriminals

Read about all the security issues that we find during our automated security reviews, and how to solve them.

Latest Articles

All

ISO 27001

All

CSP: script-src unsafe-inline

CSP is an added layer of security that helps prevent cross-site scripting (XSS) and other types of attacks by specifying which resources are allowed to be loaded on a web page. The 'CSP: script-src unsafe-inline' vulnerability occurs when inline scripts are allowed in the script-src directive of the CSP header. Inline scripts can be dangerous because they can be easily modified by attackers, allowing them to inject malicious code into the web page.

Vulnerabilities

CSP: Wildcard Directive

CSP is a security standard designed to prevent cross-site scripting (XSS) and other code injection attacks by defining and enforcing the content sources that can be executed by a web application. A wildcard directive is a CSP rule that allows any content source to be loaded by a web application, making it vulnerable to various attacks.

Vulnerabilities

CSP: Notices

CSP is a security mechanism designed to prevent cross-site scripting attacks by restricting the types of content that can be loaded. The 'CSP: Notices' vulnerability occurs when the Content-Security-Policy-Report-Only header is set, which allows a web application to receive CSP violation reports without enforcing the policy.

CSP: X-WebKit-CSP

CSP is a security standard that helps protect web applications from various types of attacks. One of the directives in CSP is the 'X-WebKit-CSP' header, which is specific to WebKit-based browsers. The vulnerability 'CSP: X-WebKit-CSP' is related to the header, which means that the header is either missing or incorrectly configured, leaving the web application open to attacks.

Vulnerabilities

CSP: X-Content-Security-Policy

The X-Content-Security-Policy (CSP) header is a security feature implemented in modern browsers that helps prevent cross-site scripting (XSS) attacks by allowing web developers to specify which resources are allowed to be loaded by the web application. The CSP: X-Content-Security-Policy vulnerability can be exploited by attackers to inject malicious scripts into a website, which can then execute on the client-side. This can lead to sensitive data being stolen, account takeovers, or other security breaches.

Vulnerabilities

CSP

Content Security Policy (CSP) is a security feature that is implemented by web applications to prevent cross-site scripting (XSS) and other code injection attacks. CSP vulnerability means that your application's CSP configuration is not secure enough to protect against code injection attacks.

Vulnerabilities