All issues

Search results

"Configuration already exists" error

Status: Open.

#545In github/secure_headers;

· owen2345 opened on Feb 5, 2025

Set default frame-ancestors on default Content-Security-Policy

Status: Open.

#532In github/secure_headers;

· rzhade3 opened on Oct 21, 2024

content_security_policy_nonce calls Rails method so CSP does not contain nonce

Status: Open.

#511In github/secure_headers;

· jdudley1123 opened on Sep 20, 2023

Set default-src CSP Attribute to none by default

Status: Open.

#482In github/secure_headers;

· rzhade3 opened on Apr 5, 2022

·

v7

Support CSP "double policies"

Status: Open.

#476In github/secure_headers;

· rohansharma opened on Feb 16, 2022

nonced tag helpers including nonce directive in csp has potential to break applications

Status: Open.

#470In github/secure_headers;

· pcasaretto opened on Mar 23, 2021

Guide for transitioning from secure_headers to vanilla rails csp

Status: Open.

#466In github/secure_headers;

· oreoshake opened on Feb 12, 2021

Validation on plugin-types does not allow for the empty directive

Status: Open.

#448In github/secure_headers;

· oreoshake opened on Oct 23, 2020

Confirm feature parity with secure_headers <=> rails vanilla

Status: Open.

#394In github/secure_headers;

· oreoshake opened on Jul 19, 2018