Deprecated Feature Policy Header Set

Home/Alerts/Alert detail/

Risk:
Low

Type:
Passive

Summary: The header has now been renamed to Permissions-Policy.

Solution: Ensure that your web server, application server, load balancer, etc. is configured to set the Permissions-Policy header instead of the Feature-Policy header.

References

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy

https://scotthelme.co.uk/goodbye-feature-policy-and-hello-permissions-policy/

Latest Security News

Canada Orders TikTok to Shut Down Canadian Operations Over Security Concerns

Hackers increasingly use Winos4.0 post-exploitation kit in attacks

Microsoft Notepad to get AI-powered rewriting tool on Windows 11

Cisco bug lets hackers run commands as root on UWRB access points

New SteelFox malware hijacks Windows PCs using vulnerable driver

VEILDrive Attack Exploits Microsoft Services to Evade Detection and Distribute Malware

Washington courts' systems offline following weekend cyberattack

Germany drafts law to protect researchers who find security flaws

Common Alerts

InformationalGraphQL Server Implementation Identified

InformationalContent Security Policy (CSP) Report-Only Header Found

InformationalNon-Storable Content

LowStrict-Transport-Security Disabled

InformationalAuthentication Request Identified

LowServer Leaks Version Information via "Server" HTTP Response Header Field

HighExternal Redirect

HighSOAP XML Injection

LowStrict-Transport-Security Header Not Set

MediumSource Code Disclosure - PHP

Latest CVE List

CVE-2024-8957 PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability

CVE-2024-8956 PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability

CVE-2024-20481 Cisco ASA and FTD Denial-of-Service Vulnerability

CVE-2024-37383 RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability

CVE-2024-47575 Fortinet FortiManager Missing Authentication Vulnerability

CVE-2024-38094 Microsoft SharePoint Deserialization Vulnerability

CVE-2024-9537 ScienceLogic SL1 Unspecified Vulnerability

CVE-2024-40711 Veeam Backup and Replication Deserialization Vulnerability

CVE-2024-30088 Microsoft Windows Kernel TOCTOU Race Condition Vulnerability

CVE-2024-9680 Mozilla Firefox Use-After-Free Vulnerability

Common CWEs

CWE-1274 Improper Access Control for Volatile Memory Containing Boot Code

CWE-167 Improper Handling of Additional Special Element

CWE-15 External Control of System or Configuration Setting

MediumCWE-754 Improper Check for Unusual or Exceptional Conditions

CWE-336 Same Seed in Pseudo-Random Number Generator (PRNG)

CWE-655 Insufficient Psychological Acceptability

HighCWE-129 Improper Validation of Array Index

CWE-653 Improper Isolation or Compartmentalization

CWE-220 Storage of File With Sensitive Data Under FTP Root

CWE-690 Unchecked Return Value to NULL Pointer Dereference

Free security scan for your website

Don't show website scan report rating on the leaderboard