You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The call to ```services.AddRazorPages()```is a standard .NET 6.0 call to ensure razor pages are included in your solution.
183
+
The call to ```services.AddStottSecurity()```in the ```ConfigureServices(IServiceCollection services)``` sets up the dependency injection requirements for the security module and is required to ensure the solution works as intended. This works by following the Services Extensions pattern defined by microsoft.
185
184
186
-
The call to ```services.AddCspManager()``` in the ```ConfigureServices(IServiceCollection services)``` sets up the dependency injection requirements for the CSP solution and is required to ensure the solution works as intended. This works by following the Services Extensions pattern defined by microsoft.
187
-
188
-
The call to ```app.UseCspManager()``` in the ```Configure(IApplicationBuilder app, IWebHostEnvironment env)``` method sets up the CSP middleware. This should be declared immediately before the ```app.UseEndpoints(...)``` method to ensure that the headers are added to content pages.
185
+
The call to ```app.UseStottSecurity()``` in the ```Configure(IApplicationBuilder app, IWebHostEnvironment env)``` method sets up the CSP middleware. This should be declared immediately before the ```app.UseEndpoints(...)``` method to ensure that the headers are added to content pages.
189
186
190
187
This solution also includes an implementation of ```IMenuProvider``` which ensures that the CSP administration pages are included in the CMS Admin menu under the title of "CSP". You do not have to do anything to make this work as Optimizely CMS will scan and action all implementations of ```IMenuProvider```.
191
188
@@ -220,7 +217,7 @@ The configuration of the module has some scope for modification by providing con
If you are using the new Optimizely Opti ID package for authentication into Optimizely CMS and the rest of the Optimizely One suite, then you will need to define the `authorizationOptions` for this module as part of your application start up. This should be a simple case of adding `policy.AddAuthenticationSchemes(OptimizelyIdentityDefaults.SchemeName);` to the `authorizationOptions` as per the example below.
### My static files like server-error.html do not have the CSP applied
433
430
434
-
Make sure that the call to `app.UseStaticFiles()` is made after the call to `app.UseCspManager()` to ensure that the CSP middleware is applied to the static file request.
431
+
Make sure that the call to `app.UseStaticFiles()` is made after the call to `app.UseStottSecurity()` to ensure that the CSP middleware is applied to the static file request.
435
432
436
433
### My Page which implements `IContentSecurityPolicyPage` is not updating with the global content security policy changes.
0 commit comments