漏洞描述
Detected the presence of the deprecated Feature-Policy HTTP response header. The Feature-Policy header has been deprecated and replaced by the Permissions-Policy header. While Feature-Policy is still supported in some browsers for backward compatibility, it is recommended to migrate to Permissions-Policy for future-proofing web applications.
影响产品
暂无结构化产品信息。
修复建议
建议关注厂商安全公告,及时升级至已修复版本,并结合实际资产暴露情况采取缓解措施。
参考链接
developer.mozilla.orghttps://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Feature-Policy↗developer.mozilla.orghttps://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy↗www.w3.orghttps://www.w3.org/TR/permissions-policy-1/↗github.comhttps://github.com/w3c/webappsec-permissions-policy/blob/main/permissions-policy-explainer.md↗