Actions
Bug #24101
closedCSP headers are duplicated and missing report-uri
Pull Request:
Severity:
Minor - inconvenience | misleading | easy workaround
UX impact:
User visibility:
Effort required:
Very Small
Priority:
0
Name check:
To do
Fix check:
To do
Regression:
No
Description
- The
Content-Security-Policy
andX-Content-Security-Policy
are duplicated (there are 4 CSP headers in total), but should not, even if it works as expected - The
report-uri
has been removed so we no longer have violation reports logged into the webapp, but we need them
Actions