ggomaeng/react-native-facebook-ui

Finding on 2018-05-21 04:26:03

Open

#3 创建于 2018年7月31日

在 GitHub 查看
 (0 评论) (0 反应) (0 负责人)JavaScript (609 star) (82 fork)batch import
bughelp wanted

描述

  • Name: Web Browser XSS Protection Not Enabled
  • ID: a4ff8bf70b1215eda9c0ae050dbec6e8
  • Affected Hosts: ['https://kolyaak.github.io/']
  • Description: Web Browser XSS Protection is not enabled, or is disabled by the configuration of the 'X-XSS-Protection' HTTP response header on the web server
  • First seen: 2018-05-21 04:26:03
  • Recommendation: Ensure that the web browser's XSS filter is enabled, by setting the X-XSS-Protection HTTP response header to '1'.

贡献者指南

技术栈
javascriptreact
领域
security
议题类型
security
难度面向新贡献者的预计实现难度，1 表示很小改动，5 表示专家级工作。
1
预计时间有经验贡献者完成调查、实现、测试并准备 pull request 的粗略时间范围。
under 1 hour
活动状态议题当前的可参与程度：新鲜、活跃、陈旧、阻塞或等待维护者输入。
stale
清晰度议题是否清楚说明期望改动、验收标准和下一步。
unclear
前置要求
basic understanding of HTTP security headers
新手友好度1-100 的估计分数，表示该议题对首次贡献者的友好程度。
70
研究方向
Investigate if the repository has a web server component (e.g., for a demo or documentation) that serves the affected host. If such a server exists, locate its configuration (e.g., Express middleware, Nginx config) and add the 'X XSS Protection: 1' header. If no server is present, the issue may be invalid and should be closed.