Search results

"Configuration already exists" error

Status: Open.

#545 In github/secure_headers;

· owen2345 opened on Feb 5, 2025

Set default frame-ancestors on default Content-Security-Policy

Status: Open.

#532 In github/secure_headers;

· rzhade3 opened on Oct 21, 2024

content_security_policy_nonce calls Rails method so CSP does not contain nonce

Status: Open.

#511 In github/secure_headers;

· jdudley1123 opened on Sep 20, 2023

Set default-src CSP Attribute to none by default

Status: Open.

#482 In github/secure_headers;

· rzhade3 opened on Apr 5, 2022

·  

v7

Support CSP "double policies"

Status: Open.

#476 In github/secure_headers;

· rohansharma opened on Feb 16, 2022

nonced tag helpers including nonce directive in csp has potential to break applications

Status: Open.

#470 In github/secure_headers;

· pcasaretto opened on Mar 23, 2021

Guide for transitioning from secure_headers to vanilla rails csp

Status: Open.

#466 In github/secure_headers;

· oreoshake opened on Feb 12, 2021

Validation on plugin-types does not allow for the empty directive

Status: Open.

#448 In github/secure_headers;

· oreoshake opened on Oct 23, 2020

Confirm feature parity with secure_headers <=> rails vanilla

Status: Open.

#394 In github/secure_headers;

· oreoshake opened on Jul 19, 2018