Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | 1.40.0rc1 | Erik Johnston | 2021-08-03 | 1 | -1/+0 |
| | |||||
* | Mitigate media repo XSSs on IE11. (#10468) | Denis Kasak | 2021-07-27 | 1 | -0/+1 |
IE11 doesn't support Content-Security-Policy but it has support for a non-standard X-Content-Security-Policy header, which only supports the sandbox directive. This prevents script execution, so it at least offers some protection against media repo-based attacks. Signed-off-by: Denis Kasak <dkasak@termina.org.uk> |