Skip to content

Add hash-based Content-Security-Policy for SAML post pages #11631

Closed
Closed
Add hash-based Content-Security-Policy for SAML post pages#11631
Assignees
ugravejzheaux
Labels
in: saml2An issue in SAML2 modulestype: enhancementA general enhancement
Milestone
5.8.0-M2

Description

@ugrave
ugrave
opened on Jul 27, 2022

Inline scripts of SAML pages for post binding does not work if CSP is active.

Therefore the page should include a hash of the inline script in the meta section.

This ticket is base of the comment of #9529 (comment)

Activity

  1. ugrave
    added
    status: waiting-for-triageAn issue we've not yet triaged
    type: bugA general bug
    on Jul 27, 2022
  2. ugrave
    added a commit that references this issue on Jul 27, 2022

    Add hash-based Content-Security-Policy for SAML pages

    c424d1c
  3. jzheaux
    added
    type: enhancementA general enhancement
    in: saml2An issue in SAML2 modules
    and removed
    status: waiting-for-triageAn issue we've not yet triaged
    type: bugA general bug
    on Jul 27, 2022
  4. jzheaux
    added this to the 5.8.0-M2 milestone on Jul 27, 2022
  5. jzheaux
    assigned
    jzheaux
    and
    ugrave
    on Jul 27, 2022
  6. jzheaux
    added a commit that references this issue on Jul 27, 2022

    Add hash-based Content-Security-Policy for SAML pages

    409998a
  7. jzheaux
    closed this as completedin 4393c2eon Jul 28, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

in: saml2An issue in SAML2 modulestype: enhancementA general enhancement

Type

No type

Projects

No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions