1

I was was inspecting elements in a website and I randomly stumbled onto this piece of code .

</style><meta name="add-styles-here"/><meta name="add-scripts-here"/></head><body><kbn-csp data="{&quot;strictCsp&quot;:false}">

Question : is there a chance to inject malicious code inside the data field ?

Improve this question

1 Answer 1

Reset to default
1

No, that's the current state of the CSP configuration of Kibana and this value come from the configuration not the client side. You can check the source code here and the CSP configuration here.

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.