Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Align production with master #181

Open
wants to merge 50 commits into
base: production
Choose a base branch
from
Open

Align production with master #181

wants to merge 50 commits into from

Conversation

aleksandrychev
Copy link
Contributor

No description provided.

mineralsfree and others added 30 commits April 19, 2024 11:49
Ticket: ENT-11532
Changelog: None
Signed-off-by: Mikita Pilinka <[email protected]>
ENT-11532: indent unordered lists in description
Ticket: SEC-1051
Changelog: None
Signed-off-by: Mikita Pilinka <[email protected]>
SEC-1051: added CSP policy to headers in nginx config
Ticket: SEC-1051
Changelog: None
Signed-off-by: Mikita Pilinka <[email protected]>
SEC-1051: refactored to comply with new CSP
Ticket: SEC-1051
Changelog: None
Signed-off-by: Mikita Pilinka <[email protected]>
SEC-1051: fixed CSP related issues and bugs
Ticket: SEC-1051
Changelog: None
Signed-off-by: Mikita Pilinka <[email protected]>
SEC-1051: added disqus.com frame-src to csp
Ticket: SEC-1051
Changelog: None
Signed-off-by: Mikita Pilinka <[email protected]>
SEC-1051: restricted inline-styles to improve CSP
@aleksandrychev
Copy link
Contributor Author

@olehermanse please don't merge

@aleksandrychev
Copy link
Contributor Author

@mineralsfree please check CSP rules, there are errors on the staging https://staging.build.cfengine.com/modules/masterfiles/
image

@olehermanse olehermanse added the WIP work in progress label Sep 9, 2024
@olehermanse olehermanse removed their request for review September 9, 2024 10:26
@mineralsfree
Copy link
Contributor

@mineralsfree please check CSP rules, there are errors on the staging https://staging.build.cfengine.com/modules/masterfiles/ image

it actually blocks code related to ad banner/data-tracker that is inserted in the comment section of the page. As it gets styles from remote server and tries to inject it in the page, it gets blocked by our CSP. I suggest we leave it as is until we replace disqus with better alternative @aleksandrychev @olehermanse

image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
WIP work in progress
Development

Successfully merging this pull request may close these issues.

4 participants