OpenACS

gustafn
committed
oacs-5-10:gustafn:20220401135453
on 01 Apr 22
new API call ::security::csp::add_static_resource_header

The API call set the CSP rule on the current connection for a static
resource depe… Show more
new API call ::security::csp::add_static_resource_header

The API call set the CSP rule on the current connection for a static

resource depending on the MIME type.

# Sample definition for custom CSP rules for static files in the

# OpenACS configuration file.

#

#  ns_section ns/server/$server/acs {

#      ...

#      ns_param StaticCSP {

#          image/svg+xml "script-src 'none'"

#      }

#      ...

#   }

bump version number of acs-tcl to 5.10.1d13

Show less