[PR #477] [CLOSED] 🔒 removing CSP headers #3164

Closed
opened 2026-02-28 20:37:25 -06:00 by GiteaMirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/actualbudget/actual/pull/477
Author: @MatissJanis
Created: 1/17/2023
Status: Closed

Base: masterHead: matiss/csp-header


📝 Commits (1)

  • 3b0e6b1 🔒 removing CSP headers

📊 Changes

1 file changed (+1 additions, -5 deletions)

View changed files

📝 packages/desktop-client/public/_headers (+1 -5)

📄 Description

[WIP]

CSP was first designed to reduce the attack surface of Cross Site Scripting (XSS) attacks, later versions of the spec also protect against other forms of attack such as Click Jacking: read more.


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/actualbudget/actual/pull/477 **Author:** [@MatissJanis](https://github.com/MatissJanis) **Created:** 1/17/2023 **Status:** ❌ Closed **Base:** `master` ← **Head:** `matiss/csp-header` --- ### 📝 Commits (1) - [`3b0e6b1`](https://github.com/actualbudget/actual/commit/3b0e6b1c75744d28629cb266a3f6c31de49daf41) :lock: removing CSP headers ### 📊 Changes **1 file changed** (+1 additions, -5 deletions) <details> <summary>View changed files</summary> 📝 `packages/desktop-client/public/_headers` (+1 -5) </details> ### 📄 Description [WIP] CSP was first designed to reduce the attack surface of Cross Site Scripting (XSS) attacks, later versions of the spec also protect against other forms of attack such as Click Jacking: [read more](https://content-security-policy.com/). --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-02-28 20:37:25 -06:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/actual#3164