Iframe Sandboxing
The
sandbox="" attribute should always be added to iframes with untrusted or third-party sources. The attribute enables different types of iframe content restrictions like script or form execution. <iframe allowfullscreen="" src="https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3826.350699942575!2d107.5808117153637!3d16.457770533278254!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3141a149b4d96f39%3A0xca00110cc7ce87f1!2zMTcgTmd1eeG7hW4gSHXhu4csIFbEqW5oIE5pbmgsIFRow6BuaCBwaOG7kSBIdeG6vywgVGjhu6thIFRoacOqbiBIdeG6vywgVmnhu4d0IE5hbQ!5e0!3m2!1svi!2s!4v1571796256332!5m2!1svi!2s" width="100%"></iframe>[http://brghospitality.vn/mondial/]
Unsafe Resource
If a resource is loaded over
src="http://...", it may not be transmitted over the TLS protocol. In case the webpage is loaded over HTTPS, this results in a mixed content situation where the page is securely loaded but has unencrypted resources embedded. This will often lead to a mixed-content browser warning, but at the time this is reported, it is most likely to late and the attack could have already succeeded. <script src="http://brghospitality.vn/mondial/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp" type="text/javascript"></script>[http://brghospitality.vn/mondial/]<script src="http://brghospitality.vn/mondial/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1" type="text/javascript"></script>[http://brghospitality.vn/mondial/]<script src="http://brghospitality.vn/mondial/wp-content/themes/placehotel/assets/js/jquery.min.js" type="text/javascript"></script>[http://brghospitality.vn/mondial/]<script src="http://brghospitality.vn/mondial/wp-content/themes/placehotel/assets/js/jquery-2.0.2.min.js" type="text/javascript"></script>[http://brghospitality.vn/mondial/]<script src="http://brghospitality.vn/mondial/wp-content/themes/placehotel/assets/bootstrap/bootstrap.min.js" type="text/javascript"></script>[http://brghospitality.vn/mondial/]<script src="http://brghospitality.vn/mondial/wp-content/themes/placehotel/assets/box/jquery.fancybox.min.js" type="text/javascript"></script>[http://brghospitality.vn/mondial/]<script src="http://brghospitality.vn/mondial/wp-content/themes/placehotel/assets/animation/wow.min.js" type="text/javascript"></script>[http://brghospitality.vn/mondial/]<script src="http://brghospitality.vn/mondial/wp-content/themes/placehotel/assets/slick/slick.js" type="text/javascript"></script>[http://brghospitality.vn/mondial/]<script src="http://brghospitality.vn/mondial/wp-content/themes/placehotel/assets/carousel/owl.carousel.min.js" type="text/javascript"></script>[http://brghospitality.vn/mondial/]<script src="http://brghospitality.vn/mondial/wp-content/themes/placehotel/assets/js/hc-offcanvas-nav.js" type="text/javascript"></script>[http://brghospitality.vn/mondial/]<script src="http://brghospitality.vn/mondial/wp-content/themes/placehotel/assets/js/jquery-ui-1.10.4.min.js" type="text/javascript"></script>[http://brghospitality.vn/mondial/]<script src="http://brghospitality.vn/mondial/wp-content/themes/placehotel/assets/js/jquery.isotope.min.js" type="text/javascript"></script>[http://brghospitality.vn/mondial/]<script src="http://brghospitality.vn/mondial/wp-content/themes/placehotel/assets/js/animated-masonry-gallery.js" type="text/javascript"></script>[http://brghospitality.vn/mondial/]<script src="http://brghospitality.vn/mondial/wp-content/themes/placehotel/assets/js/jquery.mixitup.min.js" type="text/javascript"></script>[http://brghospitality.vn/mondial/]<script src="http://brghospitality.vn/mondial/wp-content/themes/placehotel/assets/js/main.js" type="text/javascript"></script>[http://brghospitality.vn/mondial/]<link href="http://brghospitality.vn/mondial/?lang=en" hreflang="en" rel="alternate"></link>[http://brghospitality.vn/mondial/]<link href="http://brghospitality.vn/mondial/" hreflang="vi" rel="alternate"></link>[http://brghospitality.vn/mondial/]<link href="http://brghospitality.vn/mondial/feed/" rel="alternate" title="Mondial Hotel » Feed" type="application/rss+xml"></link>[http://brghospitality.vn/mondial/]<link href="http://brghospitality.vn/mondial/comments/feed/" rel="alternate" title="Mondial Hotel » Comments Feed" type="application/rss+xml"></link>[http://brghospitality.vn/mondial/]<link href="http://brghospitality.vn/mondial/wp-includes/css/dist/block-library/style.min.css?ver=5.2.2" id="wp-block-library-css" media="all" rel="stylesheet" type="text/css"></link>[http://brghospitality.vn/mondial/]<link href="http://brghospitality.vn/mondial/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.1.3" id="contact-form-7-css" media="all" rel="stylesheet" type="text/css"></link>[http://brghospitality.vn/mondial/]<link href="http://brghospitality.vn/mondial/wp-content/themes/placehotel/style.css?ver=5.2.2" id="placehotel-style-css" media="all" rel="stylesheet" type="text/css"></link>[http://brghospitality.vn/mondial/]<link href="http://brghospitality.vn/mondial/wp-json/" rel="https://api.w.org/"></link>[http://brghospitality.vn/mondial/]<link href="http://brghospitality.vn/mondial/xmlrpc.php?rsd" rel="EditURI" title="RSD" type="application/rsd+xml"></link>[http://brghospitality.vn/mondial/]<link href="http://brghospitality.vn/mondial/wp-includes/wlwmanifest.xml" rel="wlwmanifest" type="application/wlwmanifest+xml"></link>[http://brghospitality.vn/mondial/]<link href="http://brghospitality.vn/mondial/" rel="canonical"></link>[http://brghospitality.vn/mondial/]<link href="http://brghospitality.vn/mondial/" rel="shortlink"></link>[http://brghospitality.vn/mondial/]<link href="http://brghospitality.vn/mondial/wp-json/oembed/1.0/embed?url=http%3A%2F%2Fbrghospitality.vn%2Fmondial%2F" rel="alternate" type="application/json+oembed"></link>[http://brghospitality.vn/mondial/]<link href="http://brghospitality.vn/mondial/wp-json/oembed/1.0/embed?url=http%3A%2F%2Fbrghospitality.vn%2Fmondial%2F&format=xml" rel="alternate" type="text/xml+oembed"></link>[http://brghospitality.vn/mondial/]<link href="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/monidal-logo.png" rel="shortcut icon" type="image/x-icon"></link>[http://brghospitality.vn/mondial/]<link href="http://brghospitality.vn/mondial/wp-content/themes/placehotel/assets/bootstrap/bootstrap.min.css" rel="stylesheet" type="text/css"></link>[http://brghospitality.vn/mondial/]<link href="http://brghospitality.vn/mondial/wp-content/themes/placehotel/assets/fonts/font-awesome-4.7.0/css/font-awesome.min.css" rel="stylesheet" type="text/css"></link>[http://brghospitality.vn/mondial/]<link href="http://brghospitality.vn/mondial/wp-content/themes/placehotel/assets/fonts/text/font.css" rel="stylesheet" type="text/css"></link>[http://brghospitality.vn/mondial/]<link href="http://brghospitality.vn/mondial/wp-content/themes/placehotel/assets/box/jquery.fancybox.min.css" rel="stylesheet" type="text/css"></link>[http://brghospitality.vn/mondial/]<link href="http://brghospitality.vn/mondial/wp-content/themes/placehotel/assets/animation/animate.css" rel="stylesheet" type="text/css"></link>[http://brghospitality.vn/mondial/]<link href="http://brghospitality.vn/mondial/wp-content/themes/placehotel/assets/slick/slick.css" rel="stylesheet" type="text/css"></link>[http://brghospitality.vn/mondial/]<link href="http://brghospitality.vn/mondial/wp-content/themes/placehotel/assets/slick/slick-theme.css" rel="stylesheet" type="text/css"></link>[http://brghospitality.vn/mondial/]<link href="http://brghospitality.vn/mondial/wp-content/themes/placehotel/assets/carousel/owl.carousel.min.css" rel="stylesheet" type="text/css"></link>[http://brghospitality.vn/mondial/]<link href="http://brghospitality.vn/mondial/wp-content/themes/placehotel/assets/carousel/owl.theme.default.min.css" rel="stylesheet" type="text/css"></link>[http://brghospitality.vn/mondial/]<link href="http://brghospitality.vn/mondial/wp-content/themes/placehotel/assets/css/demo.css" rel="stylesheet" type="text/css"></link>[http://brghospitality.vn/mondial/]<link href="http://brghospitality.vn/mondial/wp-content/themes/placehotel/assets/css/jquery-ui.css" rel="stylesheet" type="text/css"></link>[http://brghospitality.vn/mondial/]<link href="http://brghospitality.vn/mondial/wp-content/themes/placehotel/assets/css/style_hotel8.php" rel="stylesheet" type="text/css"></link>[http://brghospitality.vn/mondial/]<link href="http://brghospitality.vn/mondial/wp-content/themes/placehotel/assets/css/thu-vien.css" rel="stylesheet" type="text/css"></link>[http://brghospitality.vn/mondial/]<link href="http://brghospitality.vn/mondial/wp-content/themes/placehotel/assets/css/animated-masonry-gallery.css" rel="stylesheet" type="text/css"></link>[http://brghospitality.vn/mondial/]<link href="http://brghospitality.vn/mondial/wp-content/themes/placehotel/assets/css/responsive.css" rel="stylesheet" type="text/css"></link>[http://brghospitality.vn/mondial/]<img alt="" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/monidal-logo.png"></img>[http://brghospitality.vn/mondial/]<img alt="" class="w-100 h-100" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/2.png"></img>[http://brghospitality.vn/mondial/]<img alt="" class="w-100 h-100" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/12/trang-chủ.jpg"></img>[http://brghospitality.vn/mondial/]<img :="" alt="" class="w-100" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/08/superior-3.jpg"></img>[http://brghospitality.vn/mondial/]<img :="" alt="" class="w-100" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/08/fire-doors.jpg"></img>[http://brghospitality.vn/mondial/]<img :="" alt="" class="w-100" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/p2-1.png"></img>[http://brghospitality.vn/mondial/]<img :="" alt="" class="w-100" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/08/Suite-River-View-5.jpg"></img>[http://brghospitality.vn/mondial/]<img alt="" src="http://brghospitality.vn/mondial/wp-content/themes/placehotel/assets/images/loader-all.gif" style="width: 10%"></img>[http://brghospitality.vn/mondial/]<img alt="" class="Trải nghiệm icon767" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/Icon_Dich-vu-01.svg"></img>[http://brghospitality.vn/mondial/]<img alt="" class="Trải nghiệm icon767" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/Icon_Dich-vu-02.svg"></img>[http://brghospitality.vn/mondial/]<img alt="" class="Trải nghiệm icon767" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/Icon_Dich-vu-03.svg"></img>[http://brghospitality.vn/mondial/]<img alt="" class="Trải nghiệm icon767" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/Icon_Dich-vu-04.svg"></img>[http://brghospitality.vn/mondial/]<img alt="" class="w-100 h-100" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2020/01/banner-web-3.jpg"></img>[http://brghospitality.vn/mondial/]<img alt="" class="w-100 h-100" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2020/01/banner-web-4.jpg"></img>[http://brghospitality.vn/mondial/]<img alt="" class="w-100 h-100" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2020/01/banner-web-2.jpg"></img>[http://brghospitality.vn/mondial/]<img alt="" class="w-100 h-100" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/uu_dai.png"></img>[http://brghospitality.vn/mondial/]<img alt="" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/icon_Trang-thiet-bi-04.svg" style="width: 4vh"></img>[http://brghospitality.vn/mondial/]<img alt="" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/icon_Trang-thiet-bi-01.svg"></img>[http://brghospitality.vn/mondial/]<img alt="" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/icon_Trang-thiet-bi-02.svg"></img>[http://brghospitality.vn/mondial/]<img alt="" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/icon_Trang-thiet-bi-03.svg"></img>[http://brghospitality.vn/mondial/]<img alt="" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/icon_Trang-thiet-bi-05.svg"></img>[http://brghospitality.vn/mondial/]<img alt="" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/icon_Trang-thiet-bi-06.svg"></img>[http://brghospitality.vn/mondial/]<img alt="" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/icon_Trang-thiet-bi-13.svg"></img>[http://brghospitality.vn/mondial/]<img alt="" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/icon_Trang-thiet-bi-14.svg"></img>[http://brghospitality.vn/mondial/]<img alt="" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/icon_Trang-thiet-bi-15.svg"></img>[http://brghospitality.vn/mondial/]<img alt="" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/icon_Trang-thiet-bi-16.svg"></img>[http://brghospitality.vn/mondial/]<img alt="" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/icon_Trang-thiet-bi-17.svg"></img>[http://brghospitality.vn/mondial/]<img alt="" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/icon_Trang-thiet-bi-06.svg"></img>[http://brghospitality.vn/mondial/]<img alt="" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/icon_Trang-thiet-bi-08.svg"></img>[http://brghospitality.vn/mondial/]<img alt="" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/icon_Trang-thiet-bi-18.svg"></img>[http://brghospitality.vn/mondial/]<img alt="" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/icon_Trang-thiet-bi-19.svg"></img>[http://brghospitality.vn/mondial/]<img alt="" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/icon_Trang-thiet-bi-10.svg"></img>[http://brghospitality.vn/mondial/]<img alt="" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/icon_Trang-thiet-bi-09.svg"></img>[http://brghospitality.vn/mondial/]<img alt="" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/icon_Trang-thiet-bi-20.svg"></img>[http://brghospitality.vn/mondial/]<img alt="" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2020/01/travel-tour-2.svg"></img>[http://brghospitality.vn/mondial/]<img alt="" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/icon_Trang-thiet-bi-11.svg"></img>[http://brghospitality.vn/mondial/]<img alt="" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/icon_Trang-thiet-bi-12.svg"></img>[http://brghospitality.vn/mondial/]<img alt="" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/icon_Trang-thiet-bi-22.svg"></img>[http://brghospitality.vn/mondial/]<img alt="" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/icon_Trang-thiet-bi-23.svg"></img>[http://brghospitality.vn/mondial/]<img alt="" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/tt1.png"></img>[http://brghospitality.vn/mondial/]<img alt="" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/tt2.png"></img>[http://brghospitality.vn/mondial/]<img alt="" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/tt3.png"></img>[http://brghospitality.vn/mondial/]<img alt="" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/tt6.png"></img>[http://brghospitality.vn/mondial/]<img alt="" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/tt4.png"></img>[http://brghospitality.vn/mondial/]<img alt="" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/tt7.png"></img>[http://brghospitality.vn/mondial/]<img alt="" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/tt.png"></img>[http://brghospitality.vn/mondial/]<img alt="" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/logo_footer.png"></img>[http://brghospitality.vn/mondial/]<img alt="" src="http://brghospitality.vn/mondial/wp-content/uploads/sites/10/2019/10/logo_footer.png"></img>[http://brghospitality.vn/mondial/]
Crossorigin
The
crossorigin="anonymous" attribute should always be added to external ressources so no user credentials are transmitted. By loading external files with a GET request, http user credentials are exchanged by default. If the source host is corrupted, an attacker could these details for attacks. <script src="https://cdn.jsdelivr.net/jquery.validation/1.16.0/jquery.validate.min.js"></script>[http://brghospitality.vn/mondial/]<script src="https://cdn.jsdelivr.net/jquery.validation/1.16.0/additional-methods.min.js"></script>[http://brghospitality.vn/mondial/]<script src="https://www.google.com/recaptcha/api.js?render=6LdNO7kUAAAAAIEjJRLX4eVV5NROPmAM2m4aaaR7"></script>[http://brghospitality.vn/mondial/]<script src="https://cdn.jsdelivr.net/npm/sweetalert2@8"></script>[http://brghospitality.vn/mondial/]<script src="//cdnjs.cloudflare.com/ajax/libs/timepicker/1.3.5/jquery.timepicker.min.js"></script>[http://brghospitality.vn/mondial/]<link href="//s.w.org" rel="dns-prefetch"></link>[http://brghospitality.vn/mondial/]<link href="//cdnjs.cloudflare.com/ajax/libs/timepicker/1.3.5/jquery.timepicker.min.css" rel="stylesheet"></link>[http://brghospitality.vn/mondial/]
Integrity
The
integrity="sha256-..." attribute should always be added to external file hosted on another domain, because an unexpected manipulation / corruption of the code can lead to session hijacking or similar script releated attacks. <script src="https://cdn.jsdelivr.net/jquery.validation/1.16.0/jquery.validate.min.js"></script>[http://brghospitality.vn/mondial/]<script src="https://cdn.jsdelivr.net/jquery.validation/1.16.0/additional-methods.min.js"></script>[http://brghospitality.vn/mondial/]<script src="https://www.google.com/recaptcha/api.js?render=6LdNO7kUAAAAAIEjJRLX4eVV5NROPmAM2m4aaaR7"></script>[http://brghospitality.vn/mondial/]<script src="https://cdn.jsdelivr.net/npm/sweetalert2@8"></script>[http://brghospitality.vn/mondial/]<script src="//cdnjs.cloudflare.com/ajax/libs/timepicker/1.3.5/jquery.timepicker.min.js"></script>[http://brghospitality.vn/mondial/]<link href="//s.w.org" rel="dns-prefetch"></link>[http://brghospitality.vn/mondial/]<link href="//cdnjs.cloudflare.com/ajax/libs/timepicker/1.3.5/jquery.timepicker.min.css" rel="stylesheet"></link>[http://brghospitality.vn/mondial/]
Link Referrer
The
rel="noreferrer" attribute should always be added to external links to prevent reverse tabnabbing for older browser, which do not support the rel="noopener" attribute and to prevent phishing attacks. <a href="https://www.book-secure.com/index.php?s=results&property=vnhue21684&locale=en_GB¤cy=USD&stid=a6q5e2nrh&showPromotions=1&Hotelnames=ASIAVNHTLMondial&hname=ASIAVNHTLMondial&Clusternames=ASIAVNHTLMondial&cluster=ASIAVNHTLMondial&redir=BIZ-so5523q0o4&rt=1576737629" style="width: 65px!important;font-size: 10px">Đặt ngay</a>[http://brghospitality.vn/mondial/]<a href="https://www.book-secure.com/index.php?s=results&property=vnhue21684&locale=en_GB¤cy=USD&stid=a6q5e2nrh&showPromotions=1&Hotelnames=ASIAVNHTLMondial&hname=ASIAVNHTLMondial&Clusternames=ASIAVNHTLMondial&cluster=ASIAVNHTLMondial&redir=BIZ-so5523q0o4&rt=1576737629"> <button class="btn" type="submit">Đặt ngay</button> </a>[http://brghospitality.vn/mondial/]<a class="show" href="javascirpt:;">Xem thêm <i aria-hidden="true" class="fa fa-angle-down"></i></a>[http://brghospitality.vn/mondial/]<a href="https://wecan-group.com/">Wecan-Group</a>[http://brghospitality.vn/mondial/]