Sec-Fetch-User Header Has an Invalid Value

• Risk:

• Informational

• Type:
• Passive

• CWE:
• CWE-352

Summary

Specifies if a navigation request was initiated by a user.

Solution

Sec-Fetch-User header must have the value set to ?1.

References

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Sec-Fetch-User