CWE-436 on ZAP

CWE-436 on ZAP /alerttags/cwe-436/ Recent content in CWE-436 on ZAP Hugo en-us Charset Mismatch /docs/alerts/90011-4/ Mon, 01 Jan 0001 00:00:00 +0000 /docs/alerts/90011-4/ <p>This check identifies responses where the HTTP Content-Type header declares a charset different from the charset defined by the body of the HTML or XML. When there’s a charset mismatch between the HTTP header and content body Web browsers can be forced into an undesirable content-sniffing mode to determine the content’s correct character set.</p> Charset Mismatch (Header Versus Meta Charset) /docs/alerts/90011-2/ Mon, 01 Jan 0001 00:00:00 +0000 /docs/alerts/90011-2/ <p>This check identifies responses where the HTTP Content-Type header declares a charset different from the charset defined by the body of the HTML or XML. When there’s a charset mismatch between the HTTP header and content body Web browsers can be forced into an undesirable content-sniffing mode to determine the content’s correct character set.</p> Charset Mismatch (Header Versus Meta Content-Type Charset) /docs/alerts/90011-1/ Mon, 01 Jan 0001 00:00:00 +0000 /docs/alerts/90011-1/ <p>This check identifies responses where the HTTP Content-Type header declares a charset different from the charset defined by the body of the HTML or XML. When there’s a charset mismatch between the HTTP header and content body Web browsers can be forced into an undesirable content-sniffing mode to determine the content’s correct character set.</p> Charset Mismatch (Meta Charset Versus Meta Content-Type Charset) /docs/alerts/90011-3/ Mon, 01 Jan 0001 00:00:00 +0000 /docs/alerts/90011-3/ <p>This check identifies responses where the HTTP Content-Type header declares a charset different from the charset defined by the body of the HTML or XML. When there’s a charset mismatch between the HTTP header and content body Web browsers can be forced into an undesirable content-sniffing mode to determine the content’s correct character set.</p>