[java-identity-provider] branch main updated: Fix invalid CSP header.

Wed Dec 13 20:35:09 UTC 2023

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch main
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=363c61cd0a2a1d2bec2b2c752bdf19e8b5016139

The following commit(s) were added to refs/heads/main by this push:
     new 363c61cd0 Fix invalid CSP header.
363c61cd0 is described below

commit 363c61cd0a2a1d2bec2b2c752bdf19e8b5016139
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Wed Dec 13 15:35:06 2023 -0500

    Fix invalid CSP header.
---
 .../src/main/resources/net/shibboleth/idp/module/views/user-prefs.vm    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/module/views/user-prefs.vm b/idp-conf-impl/src/main/resources/net/shibboleth/idp/module/views/user-prefs.vm
index cf56694d0..3915d18c4 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/module/views/user-prefs.vm
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/module/views/user-prefs.vm
@@ -12,7 +12,7 @@
 ##
 #set ($onLoad = "load('spnego')")
 #set ($onClick = "check(this)")
-$response.addHeader("Content-Security-Policy", "script-src-attr 'unsafe-hashes' 'sha256-$cspDigester.apply($onLoad)','sha256-$cspDigester.apply($onClick)'")
+$response.addHeader("Content-Security-Policy", "script-src-attr 'unsafe-hashes' 'sha256-$cspDigester.apply($onLoad)' 'sha256-$cspDigester.apply($onClick)'")
 #set ($nonce = $cspNonce.generateIdentifier())
 $response.addHeader("Content-Security-Policy", "script-src-elem 'nonce-$nonce'")
 <!DOCTYPE html>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.
