Finding on 2018-05-21 04:26:03 · ggomaeng/react-native-facebook-ui#3

2018-07-31T06:31:12.000Z

* Name: Web Browser XSS Protection Not Enabled * ID: a4ff8bf70b1215eda9c0ae050dbec6e8 * Affected Hosts: ['https://kolyaak.github.io/'] * Description: Web Browser XSS Protection is not enabled, or is disabled by the configuration of the 'X-XSS-Protection' HTTP response header on the web server * First seen: 2018-05-21 04:26:03 * Recommendation: Ensure that the web browser's XSS filter is enabled, by setting the X-XSS-Protection HTTP response header to '1'.

(0 留言) (0 反應) (0 負責人)JavaScript (609 star) (82 fork)batch import

bughelp wanted

描述

Name: Web Browser XSS Protection Not Enabled
ID: a4ff8bf70b1215eda9c0ae050dbec6e8
Affected Hosts: ['https://kolyaak.github.io/']
Description: Web Browser XSS Protection is not enabled, or is disabled by the configuration of the 'X-XSS-Protection' HTTP response header on the web server
First seen: 2018-05-21 04:26:03
Recommendation: Ensure that the web browser's XSS filter is enabled, by setting the X-XSS-Protection HTTP response header to '1'.

貢獻者指南

技術棧: javascriptreact
領域: security
議題類型: security
難度: 1
預計時間: under 1 hour
活動狀態: stale
清晰度: unclear
前置要求: basic understanding of HTTP security headers
新手友善度: 70
研究方向: Investigate if the repository has a web server component (e.g., for a demo or documentation) that serves the affected host. If such a server exists, locate its configuration (e.g., Express middleware, Nginx config) and add the 'X XSS Protection: 1' header. If no server is present, the issue may be invalid and should be closed.