summary refs log tree commit diff
path: root/changelog.d/10468.misc (follow)
Commit message (Collapse)AuthorAgeFilesLines
* 1.40.0rc1Erik Johnston2021-08-031-1/+0
|
* Mitigate media repo XSSs on IE11. (#10468)Denis Kasak2021-07-271-0/+1
IE11 doesn't support Content-Security-Policy but it has support for a non-standard X-Content-Security-Policy header, which only supports the sandbox directive. This prevents script execution, so it at least offers some protection against media repo-based attacks. Signed-off-by: Denis Kasak <dkasak@termina.org.uk>