Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Investigate setting Permissions-Policy HTTP headers #2298

Closed
tas50 opened this issue Oct 14, 2021 · 1 comment
Closed

Investigate setting Permissions-Policy HTTP headers #2298

tas50 opened this issue Oct 14, 2021 · 1 comment
Assignees
@RajeshPaul38
Labels
Aspect: Security Can an unwanted third party affect the stability or look at privileged information?

Comments

@tas50
Copy link
Contributor

tas50 commented Oct 14, 2021

Investigate setting Permissions-Policy in Supermarket. This is possible in Rails 6.1, but it may need to be done in Nginx. We should probably disable camera and payment to start since those are 100% not used by Supermarket.

https://blog.saeloun.com/2019/10/01/rails-6-1-adds-http-feature-policy.html
@tas50 tas50 added Status: Untriaged An issue that has yet to be triaged. Aspect: Security Can an unwanted third party affect the stability or look at privileged information? and removed Status: Untriaged An issue that has yet to be triaged. labels Oct 14, 2021
@RajeshPaul38 RajeshPaul38 self-assigned this Nov 18, 2021
@RajeshPaul38
Copy link
Contributor

similar requirement in this PR: https://github.com/chef/chef-manage/pull/1227

@RajeshPaul38 RajeshPaul38 mentioned this issue Nov 23, 2021
Merged
5 tasks
@RajeshPaul38 RajeshPaul38 linked a pull request Dec 6, 2021 that will close this issue
Removed gem: ruby-filemagic; replaced with built in ruby module: IO #2424
Merged
5 tasks
@RajeshPaul38 RajeshPaul38 removed a link to a pull request Dec 16, 2021
Removed gem: ruby-filemagic; replaced with built in ruby module: IO #2424
Merged
5 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@RajeshPaul38 RajeshPaul38

Labels
Aspect: Security Can an unwanted third party affect the stability or look at privileged information?
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@tas50 @RajeshPaul38