[Bug] The Content-Security-Policy header must not be overridden
Open
bug
website
- Dominant language
- Java
- Stars
- 25k
- Forks
- 6.6k
- Avg merge
- 10h 5m
- Merged PRs (30d)
- 16
Description
https://github.com/apache/skywalking-website/blob/2c07fa6a75d09f36460d022cc14b85f91625337f/.htaccess#L4
The Content-Security-Policy header must not be overridden.
There is now a standard way to add local exceptions to the CSP:
https://infra.apache.org/tools/csp.html
Please update the .htaccess file accordingly.
Contributor guide
Assessment
This issue has not been assessed yet.