Closed Bug 1333886 Opened 8 years ago Closed 3 years ago

Add strict CSP headers to all static files (images, css, js, ErrorDocuments)

Categories

(bugzilla.mozilla.org :: General, enhancement, P2)

Production
enhancement

Tracking

()

RESOLVED FIXED

People

(Reporter: dylan, Assigned: dkl)

References

(Blocks 1 open bug)

Details

All content that doesn't come out of a .cgi should have a very restrict CSP header, for instance: script-src: none, object-src: none, etc.
Component: Administration → General
Priority: -- → P5
Assignee: nobody → dylan
Priority: P5 → P2
Type: defect → enhancement
Assignee: dylan → nobody
Assignee: nobody → dkl
Status: NEW → ASSIGNED

No longer needed.

Status: ASSIGNED → RESOLVED
Closed: 3 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.