# Epic Requirement

2
Story
Task

CSP Security issue

Bug Fixes
 Daily Status - Date(29-04-2022)
Task Details subtask

EXP-169 - report url session expire time

EXP-170 - Report window is open even after

 Estimate (in
Priority JIRA# Status Start Date End Date
hours)

P2 4 In Progress 28/4/2022 29/4/2022

26/4/2022 28/4/2022
P2 Exp-169 3 Partially Completed

P2 Exp-170 2 Completed 29/4/2022 29/4/2022

Today's Effort  (in hrs) Total Actual Effort (in hrs)

2 4

1 6

2 2
Comments

1. Added <meta http-equiv="Content-Security-Policy" content="default-src 'self'"> in login.jsp page

2. Login page loading is gettign failed . Trying to understand the what attribute we need to add to
getrid of these erros in devtools console
Refused to apply inline style because it violates the following Content Security Policy directive:
"default-src 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-
cUxLqZsWDLyJVD84p8DjpudxCC4w+Uu7uP55jrTXT8Q='), or a nonce ('nonce-...') is required to
enable inline execution. Note that hashes do not apply to event handlers, style attributes and
javascript: navigations unless the 'unsafe-hashes' keyword is present. Note also that 'style-src' was
not explicitly set, so 'default-src' is used as a fallback.
1. Added the jasper pop up window functionality in login page
2. Even tried to add the jasper app logout action in the same page.
3.Still the fix is inconsitent. I work in local env. But not working in VM environment.

1. Analyzed for the possible ways for closing the pop window
2. Did With name changes in redirectJasper.js file
3. Added a internal script expense/session/login.jsp page to close the opened window when user
clicks on logout button in expense module. Still need to check whether this fix work in SSO enable
environment or not.
 Meetings
S.No Details Organized
1 Meeting with Mounika Mounika
 Time Spent
30 mins
# Learning Topic Self Learning Item

1 Java Programming, Lambda and mor Practice on consumer, Prediction, Function

 Self Learning
Estimate (in Effort Total Effort on
Status Start Date End Date
hours) (29.04.2022) the course
1 hr Completed 29/04/2022 29/04/2022 1 1
Comments