Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Configuring the X-XSS-Protection and CSP header value #8767

Merged
merged 9 commits into from
Feb 5, 2025

Conversation

swatiganesh
Copy link
Collaborator

@swatiganesh swatiganesh commented Jan 30, 2025

🔩 Description: What code changed, and why?

Configuring the value of the X-XSS-Protection and CSP header

⛓️ Related Resources

https://progresssoftware.atlassian.net/browse/CHEF-13481

👍 Definition of Done

Configuring the value of the X-XSS-Protection and CSP header

👟 How to Build and Test the Change

✅ Checklist

All PRs must tick these:

With occasional exceptions, all PRs from Progress employees must tick these:

  • Is the code clear? (complicated code or lots of comments--subdivide and use well-named methods, meaningful variable names, etc.)
  • Consistency checked? (user notifications, user prompts, visual patterns, code patterns, variable names)
  • Repeated code blocks eliminated? (adapt and reuse existing components, blocks, functions, etc.)
  • Spelling, grammar, typos checked? (at a minimum use make spell in any component directory)
  • Code well-formatted? (indents, line breaks, etc. improve rather than hinder readability)

All PRs from Progress employees should tick these if appropriate:

  • Tests added/updated? (all new code needs new tests)
  • Docs added/updated? (all customer-facing changes)

Please add a note next to any checkbox above if you are NOT ticking it.

📷 Screenshots, if applicable

Uploading image.png…

https://progresssoftware-my.sharepoint.com/:v:/g/personal/swatign_progress_com/Edw9k7yXtvtIvACGDzyhX28BZgrTP7w2wrqsenpfKRK3mA?e=WXvMAM

Signed-off-by: swatign <SwatiGanesh.Naik@Progress.com>
Copy link

netlify bot commented Jan 30, 2025

👷 Deploy Preview for chef-automate processing.

Name Link
🔨 Latest commit 4c52596
🔍 Latest deploy log https://app.netlify.com/sites/chef-automate/deploys/67a2110f199e1700082ee683

Signed-off-by: swatign <SwatiGanesh.Naik@Progress.com>
Signed-off-by: swatign <SwatiGanesh.Naik@Progress.com>
Signed-off-by: swatign <SwatiGanesh.Naik@Progress.com>
Signed-off-by: swatign <SwatiGanesh.Naik@Progress.com>
Signed-off-by: swatign <SwatiGanesh.Naik@Progress.com>
Signed-off-by: swatign <SwatiGanesh.Naik@Progress.com>
Signed-off-by: swatign <SwatiGanesh.Naik@Progress.com>

Quality Gate passed Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarQube

Signed-off-by: swatign <SwatiGanesh.Naik@Progress.com>
@swatiganesh swatiganesh self-assigned this Feb 4, 2025
@swatiganesh swatiganesh marked this pull request as ready for review February 4, 2025 15:19
@Dmaddu Dmaddu merged commit 80a4405 into main Feb 5, 2025
9 of 12 checks passed
@Dmaddu Dmaddu deleted the swati/xxss-csp-header branch February 5, 2025 12:36
Aishwarya2001A pushed a commit that referenced this pull request Feb 6, 2025
* configuring the x-xss-protrction and csp header value

Signed-off-by: swatign <SwatiGanesh.Naik@Progress.com>

* resolving a2_protobus verify pipeline error

Signed-off-by: swatign <SwatiGanesh.Naik@Progress.com>

* triggering automate-load-balancer by adding space in plan.sh

Signed-off-by: swatign <SwatiGanesh.Naik@Progress.com>

* checking pipeline

Signed-off-by: swatign <SwatiGanesh.Naik@Progress.com>

* checking pipeline-2

Signed-off-by: swatign <SwatiGanesh.Naik@Progress.com>

* checking build and changes for configuration

Signed-off-by: swatign <SwatiGanesh.Naik@Progress.com>

* solving the conf error in api-proxy componrnt

Signed-off-by: swatign <SwatiGanesh.Naik@Progress.com>

* added values in default.toml and correcting the header path

Signed-off-by: swatign <SwatiGanesh.Naik@Progress.com>

* trigering private pipeline

Signed-off-by: swatign <SwatiGanesh.Naik@Progress.com>

---------

Signed-off-by: swatign <SwatiGanesh.Naik@Progress.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants