FIX3.04.01 · Released 31 August 2021
High Importance
FIXfinPOWER Connect
Released in
3.04.01
31 August 2021
- Opened18 Jun
- Closed21 Jul
- Released31 Aug
Article 18384
Job J026804
finPOWER Connect Cloud Configuration; Content Security Policy; Defaults no longer contain wildcards
The Security page of the finPOWER Connect Cloud Configuration form allows Content Security Policy to be enabled.
The blank tips on the various fields show the defaults used. Previously, many of these contained wildcards (an asterisk) which was flagged as not being ideal by various security applications such as OWASP ZAP.