Closed
Bug 2061264
Opened 18 days ago
Closed 5 days ago
Remove CSP header from REST API responses
Categories
(bugzilla.mozilla.org :: API, task)
Tracking
()
RESOLVED
FIXED
People
(Reporter: dkl, Assigned: dkl)
Details
Attachments
(1 file)
Mostly harmless but to be consistent, we should remove the CSP header from all REST endpoints as they needlessly add 1k to the headers. Also the clients will not report to /csp_report anyway or try to execute any JS since it is all JSON escaped data. Should be a small fix to omit the header if usage_mode == REST.
|
Assignee | |
Updated•18 days ago
|
Summary: Remove CSP header from REST API responces → Remove CSP header from REST API responses
|
||
Comment 1•18 days ago
|
||
|
|
||
Comment 2•5 days ago
|
||
Authored by https://github.com/dklawren
https://github.com/mozilla-bteam/bmo/commit/892b06528bbf7d0d04512367b3bc945116af080c
[master] Bug 2061264 - Remove CSP header from REST API responses
Status: ASSIGNED → RESOLVED
Closed: 5 days ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•