Page MenuHomePhabricator

Don't emit Content-Security-Policy when returning a response during preflight setup checks
ClosedPublic

Authored by epriestley on Mar 5 2018, 2:52 PM.
Tags
None
Referenced Files
Unknown Object (File)
Thu, Jan 30, 5:07 PM
Unknown Object (File)
Tue, Jan 28, 3:31 AM
Unknown Object (File)
Mon, Jan 27, 9:10 PM
Unknown Object (File)
Sat, Jan 25, 12:27 AM
Unknown Object (File)
Sat, Jan 25, 12:27 AM
Unknown Object (File)
Sat, Jan 25, 12:27 AM
Unknown Object (File)
Sat, Jan 25, 12:27 AM
Unknown Object (File)
Tue, Jan 21, 3:42 PM
Subscribers
None

Details

Summary

Ref T4340. See https://discourse.phabricator-community.org/t/core-exception-during-installation/1193/8.

If we return a response very early during setup, we may not be able to read from the environment yet. Just decline to build a "Content-Security-Policy" header in these cases.

Test Plan
  • Faked a preflight error (e.g., safe_mode enabled), restarted apache.
    • Before patch: environment error while generating CSP.
    • After patch: no error.
  • Loaded a normal page, observed an normal CSP header.

Diff Detail

Repository
rP Phabricator
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

This revision was not accepted when it landed; it landed in state Needs Review.Mar 5 2018, 2:53 PM
epriestley requested review of this revision.
This revision was automatically updated to reflect the committed changes.