Summary
Acunetix 360 detected that object-src is missed in CSP declaration. It allows the injection of plugins which can execute JavaScript.
Remediation
Set object-src to 'none' in CSP declaration:
Content-Security-Policy: object-src 'none';
Acunetix 360 detected that object-src is missed in CSP declaration. It allows the injection of plugins which can execute JavaScript.
Set object-src to 'none' in CSP declaration:
Content-Security-Policy: object-src 'none';