I have run the OWASP ZAP tool to identify the vulnerability issues in my developed application using angular 10 and spring-boot. There I got Missing Anti-clickjacking Header vulnerability for the below URL.
I need to know how to fix this issue by stopping this call or by any other method.
maybe you can ignoring the alert, because it's a chrome-browser event https://groups.google.com/g/zaproxy-users/c/dUop7AuPFJQ
Same kind of behaviour on my side. I have found this talking about the subject:
You can see chrome background downloads using: chrome://download-internals/
It seems there are options to prevent from downloading those files: https://bugs.chromium.org/p/chromium/issues/detail?id=1311753#c24 https://source.chromium.org/chromium/chromium/src/+/main:components/optimization_guide/core/optimization_guide_features.cc;l=85
add parameter "--disable-features=OptimizationGuideModelDownloading,OptimizationHintsFetching,OptimizationTargetPrediction,OptimizationHints"
