Mixing
CSP Violation error for blocked URI https://searches8704500-a.akamaihd.net
I have added CSP in my application and from last few days my CSP-report is sending mail regarding violation rule where blocked uri - https://searches8704500-a.akamaihd.net. I am not sure what is this or is this any type malicious browser hijacking attack. Please help me what resolution should i implement to resolve this.
security content-security-policy session-hijacking
asked Nov 20 '18 at 5:17
rochakrochak
11
add a comment |
I have added CSP in my application and from last few days my CSP-report is sending mail regarding violation rule where blocked uri - https://searches8704500-a.akamaihd.net. I am not sure what is this or is this any type malicious browser hijacking attack. Please help me what resolution should i implement to resolve this.
security content-security-policy session-hijacking
asked Nov 20 '18 at 5:17
rochakrochak
11
add a comment |
I have added CSP in my application and from last few days my CSP-report is sending mail regarding violation rule where blocked uri - https://searches8704500-a.akamaihd.net. I am not sure what is this or is this any type malicious browser hijacking attack. Please help me what resolution should i implement to resolve this.
security content-security-policy session-hijacking
asked Nov 20 '18 at 5:17
rochakrochak
11
I have added CSP in my application and from last few days my CSP-report is sending mail regarding violation rule where blocked uri - https://searches8704500-a.akamaihd.net. I am not sure what is this or is this any type malicious browser hijacking attack. Please help me what resolution should i implement to resolve this.
security content-security-policy session-hijacking
security content-security-policy session-hijacking
asked Nov 20 '18 at 5:17
rochakrochak
11
asked Nov 20 '18 at 5:17
rochakrochak
11
edited Nov 20 '18 at 5:40
rochak
asked Nov 20 '18 at 5:17
rochakrochak
11
asked Nov 20 '18 at 5:17
rochakrochak
11
asked Nov 20 '18 at 5:17
rochakrochak
11
11
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
Could you share the CSP header to get more clarification?
With my understanding on CSP if the URI that you have mentioned is not used in your project or from 3rd party plugins(if any) then there is something malicious happening. And I also see that "akamaihd.net" is some kind of a spam(google for it). If that's the case then your CSP is preventing the execution of the spam URI, you need to dig deep into your project to identify which part is triggering this URI. You can use the network option from the debugging menu to look into the URI requests from your web page and can narrow down the root cause. Hope this helps.
answered Nov 20 '18 at 15:41
AbinashAbinash
63
add a comment |
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53386642%2fcsp-violation-error-for-blocked-uri-https-searches8704500-a-akamaihd-net%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Could you share the CSP header to get more clarification?
With my understanding on CSP if the URI that you have mentioned is not used in your project or from 3rd party plugins(if any) then there is something malicious happening. And I also see that "akamaihd.net" is some kind of a spam(google for it). If that's the case then your CSP is preventing the execution of the spam URI, you need to dig deep into your project to identify which part is triggering this URI. You can use the network option from the debugging menu to look into the URI requests from your web page and can narrow down the root cause. Hope this helps.
answered Nov 20 '18 at 15:41
AbinashAbinash
63
add a comment |
Could you share the CSP header to get more clarification?
With my understanding on CSP if the URI that you have mentioned is not used in your project or from 3rd party plugins(if any) then there is something malicious happening. And I also see that "akamaihd.net" is some kind of a spam(google for it). If that's the case then your CSP is preventing the execution of the spam URI, you need to dig deep into your project to identify which part is triggering this URI. You can use the network option from the debugging menu to look into the URI requests from your web page and can narrow down the root cause. Hope this helps.
answered Nov 20 '18 at 15:41
AbinashAbinash
63
add a comment |
Could you share the CSP header to get more clarification?
With my understanding on CSP if the URI that you have mentioned is not used in your project or from 3rd party plugins(if any) then there is something malicious happening. And I also see that "akamaihd.net" is some kind of a spam(google for it). If that's the case then your CSP is preventing the execution of the spam URI, you need to dig deep into your project to identify which part is triggering this URI. You can use the network option from the debugging menu to look into the URI requests from your web page and can narrow down the root cause. Hope this helps.
answered Nov 20 '18 at 15:41
AbinashAbinash
63
Could you share the CSP header to get more clarification?
With my understanding on CSP if the URI that you have mentioned is not used in your project or from 3rd party plugins(if any) then there is something malicious happening. And I also see that "akamaihd.net" is some kind of a spam(google for it). If that's the case then your CSP is preventing the execution of the spam URI, you need to dig deep into your project to identify which part is triggering this URI. You can use the network option from the debugging menu to look into the URI requests from your web page and can narrow down the root cause. Hope this helps.
answered Nov 20 '18 at 15:41
AbinashAbinash
63
answered Nov 20 '18 at 15:41
AbinashAbinash
63
answered Nov 20 '18 at 15:41
AbinashAbinash
63
answered Nov 20 '18 at 15:41
AbinashAbinash
63
63
add a comment |
add a comment |
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53386642%2fcsp-violation-error-for-blocked-uri-https-searches8704500-a-akamaihd-net%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
