apache / apache/camel-website

The Content-Security-Policy header must not be overridden

Open Beginner friendly
#1,427 5 comments 0 reactions 0 assignees View on GitHub
Dominant language
CSS
Stars
76
Forks
202
Avg merge
1d 12h
Merged PRs (30d)
19

Description

https://github.com/apache/camel-website-pub/blob/d3787ed85ad2c188955b8e0c887ef40923c5608e/.htaccess#L1909

The Content-Security-Policy header must not be overridden.

There is now a standard way to add local exceptions to the CSP:

https://infra.apache.org/tools/csp.html

Please update the .htaccess file accordingly.

Contributor guide

No contributing guide indexed for this repository

Research direction

Open the .htaccess file around line 1909 and read the linked Apache Infra CSP guidance first. Update the header handling to follow that documented local-exception mechanism without overriding the Content-Security-Policy header, then verify the resulting .htaccess change matches the standard.

Written by the indexing model from the issue text.

Assessment

Tech stack
apache
Domain
infrastructure
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
68/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.