-
Type: Bug
-
Status: In Review
-
Priority: Minor
-
Resolution: Unresolved
-
Affects Version/s: 3.0.x, 3.1.x
-
Tags:
-
Sprint:UI - 2024-6, UI - 2024-7, UI - 2024-8, UI COOLDOWN - 2024-6, UI COOLDOWN - 2024-7, UI - 2024-9, UI - 2024-12
-
Story Points:5
- default-src: should not allow '*' as source
- script-src should not allow '*' as source
AC
-
- CSP policy must keep compatibility with existing applications
- To be tested with default UI
- To be tested with a customized UI configured in Nuxeo Studio Designer
- Specifically check for the import mechanism for which we are using a polyfill to keep compatibility
- CSP policy must keep compatibility with existing applications
- depends on
-
WEBUI-1282 Allow Content Security Policy without "script-src data:"
- In Review
- is related to
-
NXP-32879 NUXEO API Documentation page did not display list of items
- Resolved
-
WEBUI-1575 The content of the spreadsheet popup did not load correctly
- Resolved
-
WEBUI-1579 Clear button in select all functionality shows csp error
- Resolved
- mentioned in
-
Page Loading...