Skip to content
This repository has been archived by the owner on Nov 19, 2024. It is now read-only.

Commit

Permalink
Corrected link syntax
Browse files Browse the repository at this point in the history
Removed the word "link" and listed URLs at end of topic.
  • Loading branch information
ccondra authored and dshevtsov committed Apr 10, 2020
1 parent 6a39e46 commit e52b5f6
Show file tree
Hide file tree
Showing 2 changed files with 14 additions and 6 deletions.
7 changes: 5 additions & 2 deletions src/security/content-security-policy.md
Original file line number Diff line number Diff line change
Expand Up @@ -15,10 +15,13 @@ To avoid interfering with site operations, CSP can be implemented gradually. CSP

It is important to review all CSP errors as they occur and refine the policies until all necessary resources are whitelisted. It is safe to swith to `restrict mode` when no more errors occur. Otherwise, a poorly configured CSP might cause the browser to display a blank page with numerous console errors. A properly configured CSP allows whitelisted content to be delivered without any perceived impact on performance.

**Restrict mode**: The browser is instructed to enforce all content policies and limit publication to whitelisted resources. Because CSP is configured from the server, rather than from the Magento Admin, most merchants need the assistance of a system integrator or developer to configure it properly. See [Content Security Policies]({% link guides/v2.3/extension-dev-guide/security/content-security-policies.md %}) in the Magento _PHP Developer Guide_.
**Restrict mode**: The browser is instructed to enforce all content policies and limit publication to whitelisted resources. Because CSP is configured from the server, rather than from the Magento Admin, most merchants need the assistance of a system integrator or developer to configure it properly. See [Content Security Policies][] in the Magento _PHP Developer Guide_.

## Reporting

By default, CSP sends errors to the browser console, but can be configured to collect error logs by HTTP request. In addition, there are a number of third-party services that you can use to monitor, collect, and report CSP violations.

[Report URI](https://report-uri.io/) is a service that monitors CSP violations and displays the results in a dashboard. Both merchants and developers can use the service to receive reports whenever CSP violations occur.
[Report URI][] is a service that monitors CSP violations and displays the results in a dashboard. Both merchants and developers can use the service to receive reports whenever CSP violations occur.

[Content Security Policies]: {{page.baseurl}}/guides/v2.3/extension-dev-guide/security/content-security-policies.html
[Report URI]: https://report-uri.io/
13 changes: 9 additions & 4 deletions src/security/security-and-compliance.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,10 +5,15 @@ title: Security and Compliance

This is where you'll find information about security, privacy, and regulation compliance, with links to technical resources.

- [Content Security Policy]({% link security/content-security-policy.md %})
- [Industry Compliance and Regulations]({% link compliance/industry-compliance.md %})
- [Content Security Policy][]
- [Industry Compliance and Regulations][]

## Additional resources

- [Magento Security Center](https://magento.com/security): The latest patches, security updates, and best practices for Magento.
- [Adobe Trust Center](https://www.adobe.com/trust.html): The lastest information available on the operational health, security, privacy, and compliance of Adobe cloud services.
- [Magento Security Center][]: The latest patches, security updates, and best practices for Magento.
- [Adobe Trust Center][]: The lastest information available on the operational health, security, privacy, and compliance of Adobe cloud services.

[Content Security Policy]: {(page.baseurl})/security/content-security-policy.html
[Industry Compliance and Regulations]: {(page.baseurl})/compliance/industry-compliance.html
[Magento Security Center]: https://magento.com/security
[Adobe Trust Center]: www.adobe.com/trust.html

0 comments on commit e52b5f6

Please sign in to comment.