Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

pscanrules: Separate Alert for CSP directives without fallback #6248

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

pscanrules: Separate Alert for CSP directives without fallback #6248

wants to merge 1 commit into from
+140 −80

Conversation

kingthorin
Copy link
Member

Overview

  • CHANGELOG > Added change note.
  • ContentSecurityPolicyScanRule > Adjust handling for directives without fallback.
  • ContentSecurityPolicyScanRuleUnitTest > Updated to conform to the new handling.
  • Messages.properties > Updated with supporting KVPs and changes.

Related Issues

Checklist

  • Update help
  • Update changelog
  • Run ./gradlew spotlessApply for code formatting
  • Write tests
  • Check code coverage
  • Sign-off commits
  • Squash commits
  • Use a descriptive title

@psiinon
Copy link
Member

psiinon commented Mar 5, 2025 •
edited
Loading

Logo
Checkmarx One – Scan Summary & Details – c2dcc7ad-ee41-4d6f-9426-e71285737ca8

Great job, no security vulnerabilities found in this Pull Request

@kingthorin
pscanrules: Separate Alert for CSP directives without fallback
70eeb5f 
- CHANGELOG > Added change note.
- ContentSecurityPolicyScanRule > Adjust handling for directives without
fallback.
- ContentSecurityPolicyScanRuleUnitTest > Updated to conform to the new
handling.
- Messages.properties > Updated with supporting KVPs and changes.

Signed-off-by: kingthorin <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

pscanrules: CSP - When a directive with no fallback is missed use a different alert name vs wildcard
2 participants
@kingthorin @psiinon