[jira] [Commented] (OFBIZ-11889) fixes for csp-report subsystem

[Nicolas Malin (Jira)]

    [ https://issues.apache.org/jira/browse/OFBIZ-11889?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17157926#comment-17157926 ]

Alex Bodnaru commented on OFBIZ-11889:
--------------------------------------

hi [~jleroux] ,

i agree to all your comments.

though the csp is not the most important header in ofbiz,

i'd think it better to be in a configuration file, but it's not urgent.

 

a good day,

 

> fixes for csp-report subsystem
> ------------------------------
>
>                 Key: OFBIZ-11889
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-11889
>             Project: OFBiz
>          Issue Type: Improvement
>          Components: ALL COMPONENTS
>    Affects Versions: Release Branch 17.12, Trunk
>            Reporter: Alex Bodnaru
>            Assignee: Jacques Le Roux
>            Priority: Major
>         Attachments: csp-report.patch
>
>   Original Estimate: 1h
>  Remaining Estimate: 1h
>
> added report-uri and unsafe-inline support for csp report.
> added handling of csp-reports and logging them as errors.
> unhandled reports are poluting the browser error console.

--
This message was sent by Atlassian Jira
(v8.3.4#803005)