With the recent AutoSSL issues and the US holiday, we are currently experiencing a higher than usual ticket volume and as a result there may be delays before we can reply to your ticket. Please feel free to reference the information available in our Forums, Documentation, and Knowledge Base in the meantime and we thank you in advance for your continued patience.

Skip to main content

PCI: Same Site Scripting "localhost" DNS records

Steven Sublett
  • Updated

Symptoms

During a PCI scan, the report returned the following message:

"Common DNS misconfiguration can lead to "same site" scripting."

 

Description 

If a user adds a DNS record for localhost in their domain, it can cause PCI scans to trigger a failure for the DNS record.

For example, domain.com or the domain with the issue would have the following DNS record:

localhost IN A 127.0.0.1

 

Workaround

Edit the DNS via DNS Zone Manager to remove the "localhost" report pointing to "127.0.0.1".

WHM DNS Zone Manager - Manage DNS Zone records

cPanel Zone Editor

 

Related articles

Comments

0 comments

Article is closed for comments.