Closed
Bug 1388808
Opened 8 years ago
Closed 8 years ago
Set CSP headers in Nginx
Categories
(Socorro :: Symbols, task)
Socorro
Symbols
Tracking
(Not tracked)
RESOLVED
FIXED
People
(Reporter: peterbe, Assigned: peterbe)
References
Details
Attachments
(1 file)
|
1.18 MB,
image/png
|
Details |
Screen Shot 2017-08-10 at 4.21.38 PM.png
Some requests (in particular the frontend) are static assets going straight from Nginx disk back to the client. E.g. / serves the /index.html file.
That means we never go into Django where django_csp sets CSP headers.
Let's move all CSP setting to Nginx.
|
Assignee | |
Comment 1•8 years ago
|
||
I'll make a PR on https://github.com/mozilla-services/cloudops-deployment/blob/symbols/projects/symbols/puppet/modules/symbols/templates/http_symbols.conf.erb
and I'll remove django_csp and its settings.
Assignee: nobody → peterbe
|
|
Assignee | |
Comment 2•8 years ago
|
||
|
|
Assignee | |
Comment 3•8 years ago
|
||
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → FIXED
|
|
Assignee | |
Comment 4•8 years ago
|
||
Yay!
You need to log in
before you can comment on or make changes to this bug.
Description
•