Apache Allura™

Forge software for hosting software projects

Brought to you by: alexluberg, brondsem, ccruz, deshani, and 11 others

#8470 Add CSP Headers

Milestone: v1.15.0

Status: closed

Owner: Guillermo Cruz

Labels: None

Component: General

Reviewer: Dave Brondsema

Updated: 2023-09-14

Created: 2022-09-27

Creator: Guillermo Cruz

Private: No

There's a couple of Content Security Policy headers we can add as an extra layer of security. Some of these header are obj-src, upgrade-insecure-request, frame-ancestors and form-action.

frame-ancestors and form-action can be configurable

Discussion

Guillermo Cruz - 2022-09-28

status: in-progress --> review
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Dave Brondsema - 2022-10-14

status: review --> closed

Reviewer: Dave Brondsema
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Guillermo Cruz - 2023-09-14

Milestone: unreleased --> v1.15.0
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Apache Allura™

Forge software for hosting software projects

Milestone

Searches

Help

#8470 Add CSP Headers

Discussion