Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Added CSP whitelist policies for avarda-hosted resources #40

Merged
merged 2 commits into from
May 7, 2024

Conversation

vmalyk
Copy link
Contributor

@vmalyk vmalyk commented Apr 26, 2024

Hi,

Added 1 additional configuration with CSP policies in Magento and add control on module.

Please review,

<value id="avarda-checkout" type="host">*.checkout-api.avarda.com</value>
</values>
</policy>
<policy id="font-src">
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Duplicate policy for the font-src.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fixed, it should be img-src.

</values>
</policy>
</policies>
</csp_whitelist>
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Add empty row to the end.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Added

@vmalyk vmalyk requested a review from joelvai April 26, 2024 09:15
@juhanihaapala juhanihaapala merged commit 3a0e5a4 into avarda-ab:master May 7, 2024
@juhanihaapala juhanihaapala added the enhancement New feature or request label May 13, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants