Cross-Domain JavaScript Source File Inclusion

• Risk:

• Low

• Type:
• Passive

• CWE:
• CWE-829

Summary

The page includes one or more script files from a third-party domain.

Solution

Ensure JavaScript source files are loaded from only trusted sources, and the sources can't be controlled by end users of the application.