Aravind K Namboothiri issues

Repositories
Issues
Comments

Results 1 issues of


                                            Aravind K Namboothiri

Wrong allow-scripts header

The const ALLOW_SCRIPTS seem to have the wrong value `allow-allow-scripts` when it should probably be `allow-scripts`: Problematic(?) code: https://github.com/frux/csp/blob/0f1ac23982c1af018645f4567291fac1edf76445/packages/csp-header/src/constants/values.ts#L17 Right value: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy/sandbox#allow-scripts