A Penetration Tester Observes That the Content Security Policy Header

Multiple Choice

A penetration tester observes that the content security policy header is missing during a web application penetration test. Which of the following techniques would the penetration tester MOST likely perform?

A) Command injection attack
B) Clickjacking attack
C) Directory traversal attack
D) Remote file inclusion attack