Open Bug 1306084 Opened 8 years ago Updated 8 years ago

Add object_src => ['none'] to DEFAULT_CSP

Categories

(Bugzilla :: Bugzilla-General, defect)

Product:
Bugzilla
Component:
Bugzilla-General
Version:
5.1.1
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

People

(Reporter: dylan, Assigned: dylanAtHome)

Details

By default bugzilla doesn't make use of any plugins (flash/etc) so it should prohibit them.
Assignee: dylan → dylan
You need to log in before you can comment on or make changes to this bug.