- Issue created by @gapple
- Status changed to Fixed
over 1 year ago 8:40pm 29 July 2023 Automatically closed - issue fixed for 2 weeks with no activity.
If Csp::setDirective() or Csp::appendDirective() are provided a string containing multiple sources separated by spaces, but additional whitespace is included, the the directive may have empty values added which cause later warnings.
#3223558-18: Hundreds of log entries: Uninitialized string offset: 0 →
Modify a policy by calling Csp::appendDirective('script-src-attr', 'https://example.com https://example.org ')
Trim leading and trailing whitespace from input values, and improve handling string inputs to split on multiple whitespace characters.
Fixed
1.0
Code
Automatically closed - issue fixed for 2 weeks with no activity.