Also emit the CSP hash in a meta tag

stevenna · May 31, 2019 · 3119979 · 3119979
1 parent b4d5470
commit 3119979
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/Sustainsys.Saml2/WebSSO/Saml2PostBinding.cs b/Sustainsys.Saml2/WebSSO/Saml2PostBinding.cs
@@ -93,6 +93,9 @@ public override CommandResult Bind(ISaml2Message message, ILoggerAdapter logger)
 <!DOCTYPE html PUBLIC ""-//W3C//DTD XHTML 1.1//EN""
 ""http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd"">
 <html xmlns=""http://www.w3.org/1999/xhtml"" xml:lang=""en"">
+<head>
+<meta http-equiv=""Content-Security-Policy"" content=""script-src 'sha256-P3ctnFLM5WKMitbWbZPkh7TsbhvCPtdF7mlwMUv2pgc='"">
+</head>
 <body>
 <noscript>
 <p>

diff --git a/Tests/Tests.Shared/WebSSO/Saml2PostBindingTests.cs b/Tests/Tests.Shared/WebSSO/Saml2PostBindingTests.cs
@@ -133,6 +133,9 @@ public void Saml2PostBinding_Bind()
 <!DOCTYPE html PUBLIC ""-//W3C//DTD XHTML 1.1//EN""
 ""http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd"">
 <html xmlns=""http://www.w3.org/1999/xhtml"" xml:lang=""en"">
+<head>
+<meta http-equiv=""Content-Security-Policy"" content=""script-src 'sha256-P3ctnFLM5WKMitbWbZPkh7TsbhvCPtdF7mlwMUv2pgc='"">
+</head>
 <body>
 <noscript>
 <p>
@@ -181,6 +184,9 @@ public void Saml2PostBinding_Bind_WithRelayState()
 <!DOCTYPE html PUBLIC ""-//W3C//DTD XHTML 1.1//EN""
 ""http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd"">
 <html xmlns=""http://www.w3.org/1999/xhtml"" xml:lang=""en"">
+<head>
+<meta http-equiv=""Content-Security-Policy"" content=""script-src 'sha256-P3ctnFLM5WKMitbWbZPkh7TsbhvCPtdF7mlwMUv2pgc='"">
+</head>
 <body>
 <noscript>
 <p>
@@ -235,6 +241,9 @@ public void Saml2PostBinding_Bind_SignsXml()
 <!DOCTYPE html PUBLIC ""-//W3C//DTD XHTML 1.1//EN""
 ""http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd"">
 <html xmlns=""http://www.w3.org/1999/xhtml"" xml:lang=""en"">
+<head>
+<meta http-equiv=""Content-Security-Policy"" content=""script-src 'sha256-P3ctnFLM5WKMitbWbZPkh7TsbhvCPtdF7mlwMUv2pgc='"">
+</head>
 <body>
 <noscript>
 <p>