Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Inject a nonce for CSP in the web server. #3578

Open
HyeockJinKim opened this issue Feb 4, 2025 — with Lablup-Issue-Syncer · 0 comments · May be fixed by #3585
Open

Inject a nonce for CSP in the web server. #3578

HyeockJinKim opened this issue Feb 4, 2025 — with Lablup-Issue-Syncer · 0 comments · May be fixed by #3585
Assignees

Comments

@HyeockJinKim
Copy link
Collaborator

HyeockJinKim commented Feb 4, 2025

Motivation  

[Why is this Story important? Explain the context and reasons for this feature or change.]  

  • There is an issue with the CSP (Content Security Policy) settings, which are currently set to “unsafe.” To ensure security without any issues, proper CSP settings need to be set.

Required Features

[Clearly describe the features or functionality needed for this Story.]  

  • Implement a feature so that when a request is received for a file with an extension specified in the static handler, a template can be injected (for injecting the nonce value).

Impact  

[Specify which components or services will be affected by this Story.]  

  • Ensure there are no security issues, and web pages should display styles properly.

Testing Scenarios  

[Outline test cases or scenarios for validating the implementation.]  

  • Verify functionality in a web environment.
  • Pass security checks using ZAP
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant