pagure

Clone

#4557 Add default restricted object-src to Content-Security-Policy
Merged 4 years ago by pingou. Opened 4 years ago by jlanda.
jlanda/pagure object-src  into  master

file modified
+1 
@@ -617,4 +617,5 @@ 
 

      "default-src 'self' https:; "
 

      "script-src 'self' '{nonce_script}'; "
 

      "style-src 'self' '{nonce_style}'; "
 

+     "object-src" 'none'"
 

  )

no initial comment

rebased onto 8daf040
4 years ago

Since this is not covered in our tests, I'm going to merge it as is, thanks! :)

Pull-Request has been merged by pingou
4 years ago
Changes Summary 1
+1 -0
file changed
pagure/default_config.py
Powered by Pagure 5.13.3
Documentation • File an Issue • About • SSH Hostkey/Fingerprint
© Red Hat, Inc. and others.