[tahoe-lafs-trac-stream] [Tahoe-LAFS] #2136: Use Content-Security-Policy to harden the WUI

Tue Jul 29 21:57:24 UTC 2014

#2136: Use Content-Security-Policy to harden the WUI
-----------------------------+---------------------------------------------
     Reporter:  freddyb      |      Owner:  daira
         Type:  defect       |     Status:  new
     Priority:  normal       |  Milestone:  undecided
    Component:  code-        |    Version:  1.10.0
  frontend-web               |   Keywords:  csp wui security xss javascript
   Resolution:               |
Launchpad Bug:               |
-----------------------------+---------------------------------------------

Comment (by daira):

 See branch https://github.com/tahoe-lafs/tahoe-lafs/commits/2136-csp-
 sandbox_0

--
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/2136#comment:6>
Tahoe-LAFS <https://Tahoe-LAFS.org>
secure decentralized storage