खुला हुआ बंद किया हुआ

CSP header missing - How to set CSP correctly to mitigate XSS attacks #2394

User avatar
0
Rajasekhar बनाया था
  • ABP Framework version: v5.0.0
  • UI type: MVC
  • DB provider: EF Core
  • Tiered (MVC) or Identity Server Separated (Angular): no
  • Exception message and stack trace:
  • Steps to reproduce the issue:"

We have deployed the ABP application for security testing and we have got CSP header missing Vulnerability

Please let us know how to configure the sever to return Content Security Policy HTTP header.

स्वीकृत उत्तर पर जाएं
2 उत्तर (ओं)
  • User Avatar
    0
    berkansasmaz बनाया था
    सहायता दल .NET Developer

    You can use the UseAbpSecurityHeaders middleware.

    app.UseAbpSecurityHeaders();

    In addition to this, this article may also be of use to you.

  • User Avatar
    0
    Rajasekhar बनाया था

    Thanks

    1
संपत्ति-भागी
कोई नहीं
लेबल
गैर अभी तक
Made with ❤️ on ABP v8.2.0-preview Updated on मार्च 25, 2024, 15:11