tree fabe119c5fd0d853d08944baaa4fb69e0e128259
parent 4642bf8f9dd78ec2990f7cd027d0efd3114e9e6d
author Basheer Ahmed Muddebihal <basheerx.muddebihal@intel.com> 1615967757 -0700
committer Ed Tanous <ed@tanous.net> 1618420400 +0000

Add Content-Security-Policy(CSP) Level2 Directives

Content Security Policy Level2 directives as below,
form-action set to 'none'-No form-submissions to external websites.
frame-ancestors set to 'none' -Preventing framing attacks
(clickjacking, cross-site leaks)
plugin-types set to 'none' -Plugins are not allowed
base-uri set to 'none' -protect against classical stored,reflected,
and some of the DOM XSS attacks.

More Information
<https://cheatsheetseries.owasp.org/cheatsheets/
Content_Security_Policy_Cheat_Sheet.html>

Tested :
Checked the CSP level directives in Chrome/Firefox/Safari Browsers,
webui and webui-vue.

Change-Id: Id823958469fdbb02259fcc24c4e91789c65eec33
Signed-off-by: Basheer Ahmed Muddebihal <basheerx.muddebihal@intel.com>