[java-idp-plugin-webauthn] branch main updated: Fix CSP for username input view

Tue Jun 25 10:24:57 UTC 2024

This is an automated email from the git hooks/post-receive script.

philsmart pushed a commit to branch main
in repository java-idp-plugin-webauthn.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-webauthn.git;a=commit;h=940764c9ef795d870fc32eb87371b5ea5dde4b8d

The following commit(s) were added to refs/heads/main by this push:
     new 940764c  Fix CSP for username input view
940764c is described below

commit 940764c9ef795d870fc32eb87371b5ea5dde4b8d
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Tue Jun 25 11:24:54 2024 +0100

    Fix CSP for username input view
---
 .../idp/plugin/authn/webauthn/views/webauthn-authn-username.vm          | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/views/webauthn-authn-username.vm b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/views/webauthn-authn-username.vm
index bcc208b..2c8e047 100644
--- a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/views/webauthn-authn-username.vm
+++ b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/views/webauthn-authn-username.vm
@@ -24,7 +24,7 @@
 #end
 
 ## Add CSP directives
-$response.addHeader("Content-Security-Policy", "default-src 'none'")
+$response.addHeader("Content-Security-Policy", "default-src 'none'; style-src 'self'; img-src 'self';")
 
 ##
 <!DOCTYPE html>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.
