Skip to content
This repository has been archived by the owner on Apr 26, 2024. It is now read-only.

Mitigate media repo XSSs on IE11. #10468

Merged
merged 2 commits into from
Jul 27, 2021
Merged

Mitigate media repo XSSs on IE11. #10468

merged 2 commits into from
Jul 27, 2021

Commits on Jul 23, 2021

  1. Mitigate media repo XSSs on IE11. 

    IE11 doesn't support Content-Security-Policy but it has support for
a non-standard X-Content-Security-Policy header, which only supports the
sandbox directive. This prevents script execution, so it at least offers
some protection against media repo-based attacks.

Signed-off-by: Denis Kasak <dkasak@termina.org.uk>
    @dkasak
    dkasak committed Jul 23, 2021
    Configuration menu
    Copy the full SHA
    a5639bf View commit details
    Browse the repository at this point in the history

  2. Add changelog entry.

    @dkasak
    dkasak committed Jul 23, 2021
    Configuration menu
    Copy the full SHA
    c7a1ae2 View commit details
    Browse the repository at this point in the history