You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: submissions/description/server_security_misconfiguration/misconfigured_security_headers/insecure_csp/template.md
+3-2Lines changed: 3 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -11,8 +11,9 @@ An insecure `Content-Security-Policy` header can lead to reputational damage and
11
11
1. Review the policy and note the usage of the following explicitly unsafe source expressions:
12
12
>
13
13
> {{replace following with relevant insecure directives}}
14
-
> - unsafe-inline: allows the execution of untrusted inline page scripts and event handlers
15
-
> - unsafe-eval: allows the execution of code injected into DOM APIs such as eval()
14
+
15
+
- unsafe-inline: allows the execution of untrusted inline page scripts and event handlers
16
+
- unsafe-eval: allows the execution of code injected into DOM APIs such as eval()
0 commit comments