OpenACS

gustafn
committed
oacs-5-10:gustafn:20221113093749
on 13 Nov 22
Minor CSP improvements

- provided ability to add "trusted-types" and "require-trusted-types-for"
directives (Trusted Types policies)
Fo… Show more
Minor CSP improvements

- provided ability to add "trusted-types" and "require-trusted-types-for"

 directives (Trusted Types policies)

 For details, see:

     https://blog.bitsrc.io/trusted-types-api-for-javascript-dom-security-fcdafa927e73

- changed default "object-src" from 'self' to 'none'

Show less