Project

General

Custom queries

Profile

Actions
Copy link

Feature #7805

closed

Add several security related HTTP headers - security hardening.

Added by Jan Rusnacko over 10 years ago. Updated almost 7 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Jan Rusnacko
Category:
Security
Target version:
1.7.0
Difficulty:
Triaged:
Bugzilla link:
Pull request:
https://github.com/theforeman/foreman/pull/1779
Fixed in Releases:
Found in Releases:
Red Hat JIRA:

Description

Several HTTP headers that enhance security on client-side:

Content Security Policy
    HTTP Strict Transport Security
    X-XSS-Protection
    X-Frame-Options
    X-Content-Type-Options All of these enable browser protections on client side and make exploitation of common web flaws harder.

Adding these should be considered security hardening.

Related issues 3 (1 open — 2 closed)

Related to Foreman - Bug #7907: gravatars are now brokenClosed10/11/2014Actions
Related to Foreman - Bug #7985: Can not access server consoleClosedShlomi Zadok10/19/2014Actions
Related to Foreman - Bug #7018: SPICE libvirt websockets connections aren't encryptedNew08/11/2014Actions
#1

Updated by Lukas Zapletal over 10 years ago

  • Category set to Security
#2

Updated by Daniel Lobato Garcia over 10 years ago

  • Pull request https://github.com/theforeman/foreman/pull/1779 added
  • Pull request deleted ()
#3

Updated by Dominic Cleal over 10 years ago

  • Status changed from New to Ready For Testing
  • Assignee set to Jan Rusnacko
  • Target version set to 1.7.2
#4

Updated by Anonymous over 10 years ago

  • Status changed from Ready For Testing to Closed
  • % Done changed from 0 to 100
#5

Updated by Ohad Levy over 10 years ago

  • Related to Bug #7907: gravatars are now broken added
#6

Updated by Daniel Lobato Garcia over 10 years ago

  • Translation missing: en.field_release set to 21
#7

Updated by Dominic Cleal over 10 years ago

  • Related to Bug #7985: Can not access server console added
#8

Updated by Dominic Cleal over 10 years ago

  • Related to Bug #7018: SPICE libvirt websockets connections aren't encrypted added
Actions
Copy link

Also available in: Atom PDF