Details
-
Bug
-
Resolution: Unresolved
-
Minor
-
None
-
None
-
None
Description
HTTP header:
Content-Security-Policy: script-src 'self'
Param to disable this or add more sites
add content security policy to only allow scripts from self (prevent XSS)
People
-
Chris Hyzer (upenn.edu)
-
- Votes:
-
0 Vote for this issue
- Watchers:
-
1 Start watching this issue
Dates
- Created:
- Updated: