From ce59cbd9a6be2f6acdec51b06639d93b238392eb Mon Sep 17 00:00:00 2001 From: zapbot <12745184+zapbot@users.noreply.github.com> Date: Fri, 23 Aug 2024 00:25:40 +0000 Subject: [PATCH] Update alert pages Signed-off-by: zapbot <12745184+zapbot@users.noreply.github.com> --- site/content/docs/alerts/10020-1.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/site/content/docs/alerts/10020-1.md b/site/content/docs/alerts/10020-1.md index d168567bb..774a362b5 100644 --- a/site/content/docs/alerts/10020-1.md +++ b/site/content/docs/alerts/10020-1.md @@ -22,4 +22,4 @@ code: https://github.com/zaproxy/zap-extensions/blob/main/addOns/pscanrules/src/ linktext: "org/zaproxy/zap/extension/pscanrules/AntiClickjackingScanRule.java" help: https://www.zaproxy.org/docs/desktop/addons/passive-scan-rules/#id-10020 --- -The response does not include either Content-Security-Policy with 'frame-ancestors' directive or X-Frame-Options to protect against 'ClickJacking' attacks. +The response does not protect against 'ClickJacking' attacks. It should include either Content-Security-Policy with 'frame-ancestors' directive or X-Frame-Options.