Andrei Aaron e63faa8898 fix(csp): upgrade UI and fix zap failure (#1372)
The zap scanner started to check the csp header, which is causing a warning.

We also need to ignore the rule, as both settings are read by the scanner.

Per https://w3c.github.io/webappsec-csp/#example-7bb4ce67 we can have multiple
Content-Security-Policy headers, and the most restrictive policies apply.
This rule doesn't seem to be applied by zap.

Signed-off-by: Andrei Aaron <aaaron@luxoft.com>
2023-04-13 13:48:09 -07:00
2022-11-29 14:04:36 -08:00
2022-08-30 21:39:16 +03:00
2022-05-04 11:52:28 -07:00
2022-12-21 10:46:31 +02:00
2022-07-12 14:25:57 -07:00
2019-06-21 15:29:19 -07:00

zot build-test codecov.io Conformance Results CodeQL CII Best Practices Go Reference

zot: a production-ready vendor-neutral OCI image registry - images stored in OCI image format, distribution specification on-the-wire, that's it!

Docs

Documentation for zot is located at: https://zotregistry.io

Code of Conduct

Details are in the code of conduct

Languages
Go 93.6%
Shell 5.8%
Makefile 0.4%