-
I suggest we have a CSP requirement that moves folks away from allow-lists to a nonce or hash strict-dynamic policy (CSP3 stuff) which is much easier to deploy and more secure.
-
### Blazorise Version
1.5
### What Blazorise provider are you running on?
Material
### Link to minimal reproduction or a simple code snippet
Run pen-test tool like https://www.zaproxy.org/ on bla…
-
**Problem description**
Using Major Versions only in the API path is going to break ASPs when there's aggregation across CSP implementations (using different minor versions). i.e. minor versions are …
-
When using the ACE solver with PyCsp3, the `AllEqual` constraint (or `NValues == 1`) fails if a domain variable is limited to one value. This issue occurs even when the constraint should be satisf…
-
problems\csp\state_csp_cover.py, line 55
radius = input['radius']
**KeyError: 'radius'**
-
## Acceptance Criteria
- USWDS is updated to version 3.8.0
- Icon spacing issues are resolved ([PR here](https://github.com/ustaxcourt/ef-cms/pull/4779))
- Cypress does not lose styling in snapshots
…
-
### Describe the bug
Hello and thank you all for making and maintaining Svelte ❤️
This is related to #5215, but that seems to be specifically targeted at the animations API, whereas I am talking…
-
Currently, data exchange capabilities that are exposed to the Web are restricted through [CSP connect-src](https://www.w3.org/TR/CSP3/#directive-connect-src), which restricts which origins can be conn…
-
## Situation
2 weeks ago, a simple [version bump](https://github.com/elastic/beats/blob/760208bdce3fa67d4a3cf59498e35c7beb12fc57/go.mod#L32) of the core `aws-sdk-go-v2` module to 1.26.1 put the AWS…
-
#### Title
Content Security Policy (CSP) Conflict When Using Content Constructor CMS
#### Description
While using the Content Constructor CMS, we encountered a Content Security Policy (CSP) issue…