search

DarrenOfficial / dpaste

The Django project driving dpaste.org
https://dpaste.org
MIT License
532 stars 123 forks source link

CSP - Upstream Patch #239

Closed DarrenOfficial closed 10 months ago

DarrenOfficial commented 10 months ago

"unsafe-inline" allows XSS reflection attack, mitigating it to use a HASH to ensure that the browser is executing the correct file.