[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 David Cook <dcook@prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #193948|0 |1 is obsolete| | --- Comment #284 from David Cook <dcook@prosentient.com.au> --- Created attachment 194576 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=194576&action=edit Bug 38365: Integrate CSP middleware into Plack apps Add Koha::Middleware::ContentSecurityPolicy to the middleware chain in both app.psgi and the Debian plack.psgi template. Without this integration, the CSP feature would not work - the middleware was created but never activated. This adds it to: - app.psgi (development/git install) - debian/templates/plack.psgi (opac, intranet, and intranet_svc mounts) Signed-off-by: David Cook <dcook@prosentient.com.au> Signed-off-by: Lari Taskula <lari.taskula@hypernova.fi> Signed-off-by: David Cook <dcook@prosentient.com.au> -- You are receiving this mail because: You are watching all bug changes.
participants (1)
-
bugzilla-daemon@bugs.koha-community.org