#5155 - CSP: Missing clickjacking protection

This is a spacer post for a website comment topic. The content this topic relates to: #5155 - CSP: Missing clickjacking protection

By Guest posted 15th Dec 2022, 3:27 PM

Looks like frame-ancestors is specified but is wildcarded to everything. This is the default configuration; maybe we should change the default for security.

0 guests and 0 members have recently viewed this.