Actions
User story #26951
open
User story #26934: Enable CSP on all pages and add tag to exclude a page
Plugins need CSP to be strict in Rudder but disabled in plugin pages
Status:
Pending technical review
Priority:
N/A
Assignee:
Category:
Web - Maintenance
Target version:
Pull Request:
UX impact:
Suggestion strength:
User visibility:
First impressions of Rudder
Effort required:
Small
Name check:
To do
Fix check:
To do
Regression:
No
Description
In parent, strict CSP headers are enabled on all pages and need to be present for scripts added by some plugins, e.g. to display something from the plugin the login page, or in the navbar.
But the plugins pages themselves have additional pages, which can be later migrated to include CSP headers
Updated by Clark ANDRIANASOLO 5 days ago
- Status changed from In progress to Pending technical review
- Pull Request set to https://github.com/Normation/rudder-plugins/pull/837
Actions