Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
OWASP
/
openshield
Public
Notifications
You must be signed in to change notification settings
Fork
69
Star
58
Code
Issues
18
Pull requests
10
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
fix(website): harden Astro CSP and verify the built output against it
- #318
#318
Merged
Vishnu2707
merged 8 commits into
OWASP:dev
OWASP/openshield:dev
from
parthrohit22:fix/website-pat-flow-xss
parthrohit22/openshield:fix/website-pat-flow-xss
Copy head branch name to clipboard
Sep 30, 2026
Conversation
Commits
8
(8)
Checks
Files changed
Merged
fix(website): harden Astro CSP and verify the built output against it
#318
Vishnu2707
merged 8 commits into
OWASP:dev
OWASP/openshield:dev
from
parthrohit22:fix/website-pat-flow-xss
parthrohit22/openshield:fix/website-pat-flow-xss
Copy head branch name to clipboard
Commits
Commits on Sep 6, 2026
fix(website): adapt security hardening to current Astro site
Show description for fba8ae9
parthrohit22
committed
fba8ae9
View commit details
Copy full SHA for fba8ae9
Browse repository at this point
Commits on Sep 8, 2026
Merge upstream/dev into fix/website-pat-flow-xss
Show description for fbfcf6f
parthrohit22
committed
fbfcf6f
View commit details
Copy full SHA for fbfcf6f
Browse repository at this point
fix(website): drop meta-ignored frame-ancestors, force external scripts
Show description for 3416bd4
parthrohit22
committed
3416bd4
View commit details
Copy full SHA for 3416bd4
Browse repository at this point
fix(website): reword verify-site inline-script message to clear Semgrep
Show description for 339f678
parthrohit22
committed
339f678
View commit details
Copy full SHA for 339f678
Browse repository at this point
fix(website): scan for inline scripts without a tag-filter regex
Show description for f2e79c8
parthrohit22
committed
f2e79c8
View commit details
Copy full SHA for f2e79c8
Browse repository at this point
Commits on Sep 16, 2026
chore: merge upstream dev into fix/website-pat-flow-xss
Show description for de11c6c
parthrohit22
committed
de11c6c
View commit details
Copy full SHA for de11c6c
Browse repository at this point
Commits on Sep 19, 2026
fix(website): enforce strict script-src in verifier
Show description for ee71795
parthrohit22
committed
ee71795
View commit details
Copy full SHA for ee71795
Browse repository at this point
Commits on Sep 20, 2026
fix(website): verify script sources are same-origin and drop dead build key
Show description for 1c86149
parthrohit22
committed
1c86149
View commit details
Copy full SHA for 1c86149
Browse repository at this point
You can’t perform that action at this time.