Skip to content

Secure Headers: CSP directive injection via sandbox, plugin_types, and report_to when given untrusted input

Moderate severity GitHub Reviewed Published Jun 3, 2026 in github/secure_headers • Updated Jul 10, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts