Feeling Lucky
?
[#32163] - [4.0] CSP article link
- Closed
- 30 Jan 2021
- Medium
- Build: staging
- # 32163
Steps to reproduce the issue
- Go to
administrator/index.php?option=com_config&view=component&component=com_csp - Click the "Content Security Policy (CSP)" link
Expected result
I would have thought this should direct users to https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP, but instead it links to https://scotthelme.co.uk/content-security-policy-an-introduction/
Is that wise?
joomla-cms-bot
- | Labels |
Added:
?
|
||
egranty
- comment
- 30 Jan 2021
The article from scott discussed is obsolete and contains wrong info. For example:
*://*.scotthelme.co.uk:* would match any scheme on any subdomain of scotthelme.co.uk.
The special character * is not allowed in sheme-part.
Mozilla's docs contains some inaccuracies too, but it's kept up to date and have a multi-lang support. I vote for MDN!
| Status | New | ⇒ | Closed |
| Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2021-01-30 09:33:14 |
| Closed_By | ⇒ | zero-24 |
Well the article from scott is more directed to users, But I have no strong opinions here feel free to send a PR to change it.