WEB APPLICATION VULNERABILITIES Standard & Premium

Permissions-Policy header not implemented

Description

The Permissions-Policy header allows developers to selectively enable and disable use of various browser features and APIs.

Remediation

References

Permissions-Policy / Feature-Policy (MDN)

Permissions Policy (W3C)

Related Vulnerabilities

Unrestricted access to Caddy API interface

Apache Server-Info Detected

PHP register_globals enabled

Django Debug Toolbar

Gitlab user disclosure

Severity

Info

Classification

CWE-1021 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:N

Tags

Configuration