bugbakery / bugbakery/audapolis
Stricter CSP
Open
code quality
- Dominant language
- TypeScript
- Stars
- 1.9k
- Forks
- 62
- PR merge metrics
- No merged PRs in 30d
Description
Currently we set an extremly wideranging CSP (https://github.com/audapolis/audapolis/pull/11/files#diff-22056bd3048b7e175e132a91056d28ba02060cf246b15a4c371ddf158b2e5720R50) to allow access to the transcription server. Once we have a configuration menu where you can set the transcription servers, we need to change this to only allow there servers
Contributor guide
Research direction
Start with the CSP setup shown at line 50 in the linked pull request #11 diff, then trace how the planned configuration menu will expose transcription servers. Define the configured-server boundary and verify that the policy permits only those servers once the menu exists.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- security, web-dev
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100