Skip to content

FEATURE: Adding http security headers#647

Open
arvinsingla wants to merge 3 commits intomasterfrom
FEATURE/security-http-headers
Open

FEATURE: Adding http security headers#647
arvinsingla wants to merge 3 commits intomasterfrom
FEATURE/security-http-headers

Conversation

@arvinsingla
Copy link
Copy Markdown
Collaborator

@arvinsingla arvinsingla commented Mar 28, 2025

First pass at adding security headers.

Any third party data that is fetched externally needs to be added to the CSP headers.

To prevent the need for modifying core files in order to add more Content-Security-Policy headers we should also add a site configuration option to allow for the customization of this header.

@arvinsingla arvinsingla added this to the 8.1 milestone Apr 14, 2025
@jegelstaff jegelstaff force-pushed the master branch 4 times, most recently from c2fb601 to 033b270 Compare May 14, 2025 04:04
@jegelstaff jegelstaff modified the milestones: 8.1, 8.2 Sep 21, 2025
@jegelstaff jegelstaff force-pushed the master branch 10 times, most recently from 8a6f324 to 973aaeb Compare December 3, 2025 21:14
@jegelstaff jegelstaff force-pushed the master branch 8 times, most recently from abd4e79 to 4885ccc Compare December 12, 2025 17:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants