Merge pull request #1538 from zapbot/update-site-content

Update site content
zaproxy · Aug 23, 2024 · 50a330a · 50a330a
2 parents bcf9702 + 1455b32
commit 50a330a
Show file tree

Hide file tree

Showing 8 changed files with 9 additions and 9 deletions.
diff --git a/alerttags/cwe-1021/index.xml b/alerttags/cwe-1021/index.xml
@@ -12,7 +12,7 @@
       <link>/docs/alerts/10020-1/</link>
       <pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
       <guid>/docs/alerts/10020-1/</guid>
-      <description>The response does not include either Content-Security-Policy with &amp;lsquo;frame-ancestors&amp;rsquo; directive or X-Frame-Options to protect against &amp;lsquo;ClickJacking&amp;rsquo; attacks.</description>
+      <description>The response does not protect against &amp;lsquo;ClickJacking&amp;rsquo; attacks. It should include either Content-Security-Policy with &amp;lsquo;frame-ancestors&amp;rsquo; directive or X-Frame-Options.</description>
     </item>
     <item>
       <title>Multiple X-Frame-Options Header Entries</title>

diff --git a/alerttags/owasp_2017_a06/index.xml b/alerttags/owasp_2017_a06/index.xml
@@ -327,7 +327,7 @@
       <link>/docs/alerts/10020-1/</link>
       <pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
       <guid>/docs/alerts/10020-1/</guid>
-      <description>The response does not include either Content-Security-Policy with &amp;lsquo;frame-ancestors&amp;rsquo; directive or X-Frame-Options to protect against &amp;lsquo;ClickJacking&amp;rsquo; attacks.</description>
+      <description>The response does not protect against &amp;lsquo;ClickJacking&amp;rsquo; attacks. It should include either Content-Security-Policy with &amp;lsquo;frame-ancestors&amp;rsquo; directive or X-Frame-Options.</description>
     </item>
     <item>
       <title>Multiple X-Frame-Options Header Entries</title>

diff --git a/alerttags/owasp_2021_a05/index.xml b/alerttags/owasp_2021_a05/index.xml
@@ -285,7 +285,7 @@
       <link>/docs/alerts/10020-1/</link>
       <pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
       <guid>/docs/alerts/10020-1/</guid>
-      <description>The response does not include either Content-Security-Policy with &amp;lsquo;frame-ancestors&amp;rsquo; directive or X-Frame-Options to protect against &amp;lsquo;ClickJacking&amp;rsquo; attacks.</description>
+      <description>The response does not protect against &amp;lsquo;ClickJacking&amp;rsquo; attacks. It should include either Content-Security-Policy with &amp;lsquo;frame-ancestors&amp;rsquo; directive or X-Frame-Options.</description>
     </item>
     <item>
       <title>Multiple X-Frame-Options Header Entries</title>

diff --git a/alerttags/wstg-v42-clnt-09/index.xml b/alerttags/wstg-v42-clnt-09/index.xml
@@ -12,7 +12,7 @@
       <link>/docs/alerts/10020-1/</link>
       <pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
       <guid>/docs/alerts/10020-1/</guid>
-      <description>The response does not include either Content-Security-Policy with &amp;lsquo;frame-ancestors&amp;rsquo; directive or X-Frame-Options to protect against &amp;lsquo;ClickJacking&amp;rsquo; attacks.</description>
+      <description>The response does not protect against &amp;lsquo;ClickJacking&amp;rsquo; attacks. It should include either Content-Security-Policy with &amp;lsquo;frame-ancestors&amp;rsquo; directive or X-Frame-Options.</description>
     </item>
     <item>
       <title>Multiple X-Frame-Options Header Entries</title>

diff --git a/docs/alerts/10020-1/index.html b/docs/alerts/10020-1/index.html
@@ -231,7 +231,7 @@ <h1 class="text--white">Missing Anti-clickjacking Header</h1>
       <section class="col-2-3">
         <div data-attr="summary">
           <h3 class="mb-10">Summary</h3>
-          <p>The response does not include either Content-Security-Policy with &lsquo;frame-ancestors&rsquo; directive or X-Frame-Options to protect against &lsquo;ClickJacking&rsquo; attacks.</p>
+          <p>The response does not protect against &lsquo;ClickJacking&rsquo; attacks. It should include either Content-Security-Policy with &lsquo;frame-ancestors&rsquo; directive or X-Frame-Options.</p>
 
         </div>
         <div data-attr="solution" class="mb-20">

diff --git a/docs/alerts/index.xml b/docs/alerts/index.xml
@@ -1119,7 +1119,7 @@
       <link>/docs/alerts/10020-1/</link>
       <pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
       <guid>/docs/alerts/10020-1/</guid>
-      <description>The response does not include either Content-Security-Policy with &amp;lsquo;frame-ancestors&amp;rsquo; directive or X-Frame-Options to protect against &amp;lsquo;ClickJacking&amp;rsquo; attacks.</description>
+      <description>The response does not protect against &amp;lsquo;ClickJacking&amp;rsquo; attacks. It should include either Content-Security-Policy with &amp;lsquo;frame-ancestors&amp;rsquo; directive or X-Frame-Options.</description>
     </item>
     <item>
       <title>Missing Security Headers</title>

diff --git a/index.xml b/index.xml
@@ -7570,7 +7570,7 @@ Proxy the outgoing HTTP requests made by the web application Direct the server t
       <pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
 
       <guid>/docs/alerts/10020-1/</guid>
-      <description>The response does not include either Content-Security-Policy with &amp;lsquo;frame-ancestors&amp;rsquo; directive or X-Frame-Options to protect against &amp;lsquo;ClickJacking&amp;rsquo; attacks.</description>
+      <description>The response does not protect against &amp;lsquo;ClickJacking&amp;rsquo; attacks. It should include either Content-Security-Policy with &amp;lsquo;frame-ancestors&amp;rsquo; directive or X-Frame-Options.</description>
     </item>
 
     <item>

diff --git a/search/index.json b/search/index.json
@@ -6100,8 +6100,8 @@
     "title": "Missing Anti-clickjacking Header",
     "keywords": ["","anti-clickjacking","header","missing"],
     "tags": null,
-    "summary": "The response does not include either Content-Security-Policy with \u0026lsquo;frame-ancestors\u0026rsquo; directive or X-Frame-Options to protect against \u0026lsquo;ClickJacking\u0026rsquo; attacks.",
-    "content": "response does not include either contentsecuritypolicy frameancestors directive xframeoptions protect against clickjacking attacks "
+    "summary": "The response does not protect against \u0026lsquo;ClickJacking\u0026rsquo; attacks. It should include either Content-Security-Policy with \u0026lsquo;frame-ancestors\u0026rsquo; directive or X-Frame-Options.",
+    "content": "response does not protect against clickjacking attacks should include either contentsecuritypolicy frameancestors directive xframeoptions "
     },
 {
     "url": "/docs/alerts/100016/",