Closed oyvindhagberg closed 5 years ago
Integrity hashes should be put in place where the 3rd party libraries are actually downloaded, which is in the RPM building process. Create a sha256sum-file and add a command in nivlheim.spec that verifies the checksums.
https://scotthelme.co.uk/content-security-policy-an-introduction/ https://content-security-policy.com/ https://scotthelme.co.uk/protect-site-from-cryptojacking-csp-sri/ https://www.troyhunt.com/add-ons-extensions-and-csp-violations-playing-nice-with-content-security-policies/ https://report-uri.com/
Also implement:
Test with this: