Forum Discussion

pitmaster's avatar
pitmaster
Icon for Nimbostratus rankNimbostratus
Feb 25, 2016

Scanned with HP Web Inspect

My web app was recently DAST scanned and one of the vulnerabilities was "Missing Cross-Frame Scripting Protection".. Does the ASM protect against that? if not can someone explain?  
ASM Advanced WAF
security
Erik_Novak's avatar
Erik_Novak
Icon for Employee rankEmployee
Feb 25, 2016

This is an interesting situation that occurs from time to time when the description of a vulnerability discovered by a scanner is slightly different than the wording for an ASM violation. ASM would most likely mitigate this vulnerability by either applying cross site scripting signatures, or by suggesting that you turn on Cross Site Request Forgery protection, or both.