A penetration tester observes that the content security policy header is missing during a web application penetration test. Which of the following techniques would the penetration tester MOST likely perform?
A) Command injection attack
B) Clickjacking attack
C) Directory traversal attack
D) Remote file inclusion attack

Question

Quizplus · Accepted Answer

A missing content security policy header can make a web application vulnerable to clickjacking attacks, as it helps prevent the embedding of the site in iframes.

A Penetration Tester Observes That the Content Security Policy Header