The Content-Security-Policy header must not be overridden
- Dominant language
- CSS
- Stars
- 76
- Forks
- 202
- Avg merge
- 1d 12h
- Merged PRs (30d)
- 19
Description
https://github.com/apache/camel-website-pub/blob/d3787ed85ad2c188955b8e0c887ef40923c5608e/.htaccess#L1909
The Content-Security-Policy header must not be overridden.
There is now a standard way to add local exceptions to the CSP:
https://infra.apache.org/tools/csp.html
Please update the .htaccess file accordingly.
Contributor guide
No contributing guide indexed for this repository
Research direction
Open the .htaccess file around line 1909 and read the linked Apache Infra CSP guidance first. Update the header handling to follow that documented local-exception mechanism without overriding the Content-Security-Policy header, then verify the resulting .htaccess change matches the standard.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- apache
- Domain
- infrastructure
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 68/100