Project

General

Profile

Actions
Copy link

Bug #100905

closed

Epic #87417: Integrate proper Content Security Policy (CSP) handling

Feature #99499: Introduce Content Security Policy handling

Deny base-uri and object-src per default

Added by Oliver Hader over 1 year ago. Updated 4 months ago.

Status:
Closed
Priority:
Should have
Assignee:
Oliver Hader
Category:
Security
Target version:
-
Start date:
2023-05-20
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
12
PHP Version:
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

new MutationCollection(
    new Mutation(MutationMode::Set, Directive::ObjectSrc, SourceKeyword::none),
    new Mutation(MutationMode::Set, Directive::BaseUri, SourceKeyword::none),
)

Related issues 1 (0 open — 1 closed)

Is duplicate of TYPO3 Core - Bug #101477: Extend CSP directives and sourcesClosedOliver Hader2023-07-28

Actions
Actions
Copy link

Also available in: Atom PDF