Matrix-Mirrors/synapse-product
1
0
Fork 0
mirror of https://git.anonymousland.org/anonymousland/synapse-product.git synced 2024-12-21 03:34:22 -05:00
Code Issues Packages Projects Releases Wiki Activity
f8c87c65eb
synapse-product/changelog.d/10468.misc

2 lines
95 B
Plaintext
Raw Normal View History

Mitigate media repo XSSs on IE11. (#10468) IE11 doesn't support Content-Security-Policy but it has support for a non-standard X-Content-Security-Policy header, which only supports the sandbox directive. This prevents script execution, so it at least offers some protection against media repo-based attacks. Signed-off-by: Denis Kasak <dkasak@termina.org.uk>
2021-07-27 07:45:10 -04:00
Mitigate media repo XSS attacks on IE11 via the non-standard X-Content-Security-Policy header.
Reference in New Issue Copy Permalink