Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id A2FF2200C56 for ; Fri, 14 Apr 2017 08:27:23 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id A19C3160B8C; Fri, 14 Apr 2017 06:27:23 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id DD706160B80 for ; Fri, 14 Apr 2017 08:27:22 +0200 (CEST) Received: (qmail 7599 invoked by uid 500); 14 Apr 2017 06:27:22 -0000 Mailing-List: contact dev-help@cloudstack.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@cloudstack.apache.org Delivered-To: mailing list dev@cloudstack.apache.org Received: (qmail 7588 invoked by uid 99); 14 Apr 2017 06:27:21 -0000 Received: from git1-us-west.apache.org (HELO git1-us-west.apache.org) (140.211.11.23) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 14 Apr 2017 06:27:21 +0000 Received: by git1-us-west.apache.org (ASF Mail Server at git1-us-west.apache.org, from userid 33) id 915C6E00B4; Fri, 14 Apr 2017 06:27:21 +0000 (UTC) From: harikrishna-patnala To: dev@cloudstack.apache.org Reply-To: dev@cloudstack.apache.org References: In-Reply-To: Subject: [GitHub] cloudstack issue #2006: CLOUDSTACK-9833: Move configuration parameters from ... Content-Type: text/plain Message-Id: <20170414062721.915C6E00B4@git1-us-west.apache.org> Date: Fri, 14 Apr 2017 06:27:21 +0000 (UTC) archived-at: Fri, 14 Apr 2017 06:27:23 -0000 Github user harikrishna-patnala commented on the issue: https://github.com/apache/cloudstack/pull/2006 Thanks @jayapalu I have also added some content security policy in HTTP servlet response to detect and mitigate certain type of attacks. Restricted image source, style sheets, java scripts, URLs to be loaded only from self. --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not have this feature enabled and wishes so, or if the feature is enabled but not working, please contact infrastructure at infrastructure@apache.org or file a JIRA ticket with INFRA. ---