Konstantin,

On Sun, Aug 16, 2020 at 1:00 PM Konstantin Kolinko <[email protected]>
wrote:

> вс, 16 авг. 2020 г. в 21:32, Igal Sapir <[email protected]>:
> >
> > I don't see any scripts either.  Why not add a CSP and set script to
> 'none'?  I can add that if no one objects.
> >
>
> sessionsList.jsp has onclick attributes. Maybe it can be modified to
> work without them, I do not know.
>

Definitely something to consider.  I naively searched for "script" and
missed that.

Thank you,

Igal



>
> K.Kolinko
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>
>

Reply via email to