Security finding
A security header is sent under an old name or with a wrong value
Security Warning Severity: Medium
Part of the audit Security headers. Finding id: security.headerValuesWrong.
What it costs you
The header is there but does not do what it is meant to.
What to do
Correct the header name or value.
What it checks
- Policy only set in an outdated header
- Outdated browser filter switched on
- File type sniffing setting is wrong