Uploaded image for project: 'ZABBIX FEATURE REQUESTS'
  1. ZABBIX FEATURE REQUESTS
  2. ZBXNEXT-3692

support for "Content Security Policy" HTTP header for zabbix frontend

    XMLWordPrintable

Details

    • Change Request
    • Status: Closed
    • Trivial
    • Resolution: Fixed
    • 3.4.0alpha1, 4.0.23, 5.0.2
    • 6.2.0alpha2, 6.2 (plan)
    • Frontend (F)
    • Team A
    • Sprint 86 (Mar 2022), Sprint 87 (Apr 2022), Sprint 88 (May 2022), Sprint 89 (Jun 2022), Sprint 90 (Jul 2022), Sprint 91 (Aug 2022)
    • 1

    Description

      The Content-Security-Policy HTTP response header helps you reduce XSS risks on modern browsers by declaring what dynamic resources are allowed to load via a HTTP Header.

      Description:
      https://content-security-policy.com/

      Examples:
      https://habrahabr.ru/company/nixsolutions/blog/271575/

      Attachments

        Issue Links

          is duplicated by

          New Feature Request - A new feature request of the product, which has yet to be developed. ZBXNEXT-6431 Support of content security policy for Inline JS scripts in UI

          • Medium - Has the protential to affect progress.
          • Closed

          Activity

            People

              averza Andrejs Verza
              oleg.egorov Oleg Egorov (Inactive)
              Votes:
              6 Vote for this issue
              Watchers:
              21 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: