ggomaeng/react-native-facebook-ui

Finding on 2018-05-21 04:26:03

Open

#3 opened on Jul 31, 2018

View on GitHub
 (0 comments) (0 reactions) (0 assignees)JavaScript (82 forks)batch import
bughelp wanted

Repository metrics

Stars
 (609 stars)
PR merge metrics
 (No merged PRs in 30d)

Description

  • Name: Web Browser XSS Protection Not Enabled
  • ID: a4ff8bf70b1215eda9c0ae050dbec6e8
  • Affected Hosts: ['https://kolyaak.github.io/']
  • Description: Web Browser XSS Protection is not enabled, or is disabled by the configuration of the 'X-XSS-Protection' HTTP response header on the web server
  • First seen: 2018-05-21 04:26:03
  • Recommendation: Ensure that the web browser's XSS filter is enabled, by setting the X-XSS-Protection HTTP response header to '1'.

Contributor guide

Research direction
Check the server configuration to ensure the X XSS Protection header is set to '1' for all responses.
Tech stack
javascriptreact native
Domain
mobile
Issue type
Security
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
1
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
Under 1 hour
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Fresh
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
GitHTTP headers
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
90