Description

Detects security risks associated with JSONP (JSON with Padding) endpoints exposed in Content Security Policy headers. JSONP endpoints can enable cross-origin data theft and injection attacks if improperly configured, especially when used with permissive CSP directives.

Detection Strategy

• Analyzes HTTP responses containing Content-Security-Policy (CSP) headers

• Identifies hosts/domains listed in CSP directives that are known to serve JSONP endpoints

• Reports a vulnerability when CSP allows access to domains with JSONP endpoints that could enable data theft