[java-idp-plugin-webauthn] branch main updated: Fix CSP in registration page

Tue Aug 13 14:58:53 UTC 2024

This is an automated email from the git hooks/post-receive script.

philsmart pushed a commit to branch main
in repository java-idp-plugin-webauthn.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-webauthn.git;a=commit;h=7035a3e0c5f4f0204a3adb3ca9addd35ceccac2b

The following commit(s) were added to refs/heads/main by this push:
     new 7035a3e  Fix CSP in registration page
7035a3e is described below

commit 7035a3e0c5f4f0204a3adb3ca9addd35ceccac2b
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Tue Aug 13 15:58:51 2024 +0100

    Fix CSP in registration page
---
 .../net/shibboleth/idp/plugin/authn/webauthn/views/webauthn-register.vm | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/views/webauthn-register.vm b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/views/webauthn-register.vm
index 81319d9..f176903 100644
--- a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/views/webauthn-register.vm
+++ b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/views/webauthn-register.vm
@@ -21,7 +21,7 @@
 ## Add CSP directives
 #set ($areYouSure =  "return confirm('#springMessageText('idp.webauthn.register.credential.remove.confirm', 'Are you sure')');")
 #set ($nonce = $cspNonce.generateIdentifier())
-$response.addHeader("Content-Security-Policy", "default-src 'none'; style-src 'self'; img-src 'self'; script-src-elem 'nonce-$nonce'; script-src-attr 'unsafe-hashes' 'sha256-$cspDigester.apply($areYouSure)'")
+$response.addHeader("Content-Security-Policy", "default-src 'none'; style-src 'self'; img-src 'self' data:; script-src-elem 'nonce-$nonce'; script-src-attr 'unsafe-hashes' 'sha256-$cspDigester.apply($areYouSure)'")
 
 ##
 <!DOCTYPE html>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.
