Description

Detects if a web application is missing the Upgrade-Insecure-Requests security header or equivalent CSP directive. This header protects users by instructing browsers to upgrade HTTP requests to HTTPS, preventing potential downgrade attacks and data exposure over insecure connections.

Detection Strategy

• Check if the 'Upgrade-Insecure-Requests' HTTP header is absent from the response

• If the header is missing, check if Content-Security-Policy (CSP) header contains 'upgrade-insecure-requests' directive

• Report vulnerability if neither the dedicated header nor CSP directive are present