emceeaich | Adding CSP to bugzilla.mozilla.org

We're about to enable a Content Security Policy (CSP) on bugzilla.mozilla.org. CSP will mitigate several types of attack on our users and our site, including Cross-Site Request Forgery (CSRF) and Cross-Site Scripting (XSS). The first place we're deploying this is in the bug detail page in the new Modal view (which, you may recall, we're making the default view) with a goal for the site to have com

[efcl]

bugzillaにCSP

[Jxck]

bugzilla.moziila.org に CSP を足すらしい。

[Rockridge]

そう遠くないうちにBugzilla@MozillaでContent Security Policy（CSP）がサポートされる。