Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Script-Src-Elem missing from CSP directives #8284

Open
crustamet opened this issue Dec 3, 2023 · 1 comment
Open

Script-Src-Elem missing from CSP directives #8284

crustamet opened this issue Dec 3, 2023 · 1 comment
Labels
enhancement PRs that improve existing functionalities

Comments

@crustamet
Copy link
Contributor

Hello i was looking into this CSP feature more and more and i found out that codeigniter does not have this option inside the CSP file & config, can we get this into the master also please ?

image

https://github.com/codeigniter4/CodeIgniter4/blob/develop/system/HTTP/ContentSecurityPolicy.php#L701

just missing style-src-elem and in the App/config/CSP
@kenjis kenjis added the enhancement PRs that improve existing functionalities label Dec 3, 2023
@kenjis
Copy link
Member

kenjis commented Dec 3, 2023 •
edited

CSP3 directives are not implemented in CI4.
Ref https://forum.codeigniter.com/showthread.php?tid=88753

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement PRs that improve existing functionalities
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@kenjis @crustamet