Skip to content

Updating CSP #295

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 10 commits into from
Jan 15, 2024
Merged

Updating CSP #295

Changes from all commits
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
94bdd70
Configuring Content Security Policy (CSP)
leonardomoralopez89 Jan 11, 2024
a93bc8b
Changing security policy in application
c3s4rfred Jan 11, 2024
eb3c9ed
Allowing to change only the user_img field value for the UtmImages en…
leonardomoralopez89 Jan 12, 2024
b1a0f58
Adding image verification and validation in the UtmImagesResource upd…
c3s4rfred Jan 12, 2024
6938b62
Merge branch 'main' into bugfix/10.2/backend-xss-attack-prevention
c3s4rfred Jan 12, 2024
c0c56ee
Merge branch 'main' into bugfix/10.2/backend-xss-attack-prevention
c3s4rfred Jan 15, 2024
61f3988
Updating Content Security Policy
c3s4rfred Jan 15, 2024
7011abc
Revert "Updating Content Security Policy"
c3s4rfred Jan 15, 2024
21044b0
Merge branch 'main' into bugfix/10.2/backend-xss-attack-prevention
c3s4rfred Jan 15, 2024
813934e
Updating Content Security Policy
c3s4rfred Jan 15, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion backend/src/main/resources/config/application.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -127,6 +127,6 @@ jhipster:
license: unlicensed
license-url:
security:
content-security-policy: "default-src 'self' https://fonts.googleapis.com/css* https://fonts.gstatic.com/s/poppins/v20*; frame-src 'self' data:; script-src 'self' https://storage.googleapis.com; style-src 'self'; img-src 'self' data:; font-src 'self' data:"
content-security-policy: "default-src 'self' https://fonts.googleapis.com/css* https://fonts.gstatic.com/s/poppins/v20*; frame-src 'self' data:; script-src 'self' https://storage.googleapis.com*; style-src 'self' https://fonts.googleapis.com/css*; img-src 'self' data:; font-src 'self' data:"

# application: