Sec-Fetch-User Header is Missing

• Risk:

• Informational

• Type:
• Passive

• CWE:
• CWE-352

Summary

Specifies if a navigation request was initiated by a user.

Solution

Ensure that Sec-Fetch-User header is included in user initiated requests.

References

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Sec-Fetch-User