HexBrain

withinsecurity · Report #96218

Uses unsafe-inline without nonce

Validstatus
1upvotes
28 Oct 2015disclosed

How it was found

Hi, I found you website using Uses unsafe-inline without nonce. Allowing unsafe-eval can increase risk of various types of attacks. Consider adding a nonce which makes injecting malicious code more difficult as an attacker would need to guess the nonce. Thanks,

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original