Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Security: enable Content-Security-Policy header #185

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Security: enable Content-Security-Policy header #185

wants to merge 1 commit into from

Conversation

fallen
Copy link
Member

@fallen fallen commented Dec 21, 2019 •
edited
Loading

This is not ready yet as I didn't find yet a mean to use the style-src: 'unsafe-inline' CSP attribute for the petition detail template which contains TinyMCE content with lots of inline style="" attributes

So far to make progress on this PR I need help on these points:

@fallen fallen mentioned this pull request Jan 14, 2020
Open
@fallen fallen linked an issue Feb 29, 2020 that may be closed by this pull request
Implement Content Security Policy (CSP) #192
Open
@fallen fallen force-pushed the master branch 2 times, most recently from ddc5157 to 23a84c9 Compare April 12, 2020 18:18
@fallen fallen force-pushed the master branch 2 times, most recently from c285207 to 2037088 Compare April 4, 2024 22:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
help wanted not ready yet security
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

Implement Content Security Policy (CSP)
1 participant
@fallen