eucalyptus/eucaconsole — pull request #1126 by kamalgill (2014-11-05 04:37:15+00:00)
Title: GUI-1415: Set CSP header to mitigate XSS attack vectors

Implements https://eucalyptus.atlassian.net/browse/GUI-1415

Note: With the CSP headers in place, all inline scripts (including onclick="…" and href="javascript: …") will be prevented. The inline scripts formerly included in master_layout.pt have been moved to eucaconsole.js, and the inline script for the security group rules editor JS has been moved to securitygroup_rules.js