Skip to content
Snippets Groups Projects

content-security-policy-checker

Passed Started by
Lauren Barker
@laurenbarker
1Running with gitlab-runner 17.7.0~pre.103.g896916a8 (896916a8)
2 on green-2.private.runners-manager.gitlab.com/gitlab.com/gitlab-com J1LREoAx, system ID: s_5651e5b5643b
3 feature flags: FF_ENABLE_BASH_EXIT_CODE_CHECK:true
4Resolving secrets
5 Preparing the "docker+machine" executor 00:09
6Using Docker executor with image debian:stable-slim ...
7Pulling docker image debian:stable-slim ...
8Using docker image sha256:c78f79ce571c009f21f956eca1f2a46d62efb505a11139eb8d3520c28739fc70 for debian:stable-slim with digest debian@sha256:b5ace515e78743215a1b101a6f17e59ed74b17132139ca3af3c37e605205e973 ...
9 Preparing environment 00:01
10Running on runner-j1lreoax-project-7764-concurrent-0 via runner-j1lreoax-private-1737730824-b25ace4b...
11 Getting source from Git repository 00:51
12Fetching changes with git depth set to 10...
13Initialized empty Git repository in /builds/gitlab-com/www-gitlab-com/.git/
14Created fresh repository.
15remote: Enumerating objects: 23707, done.
16remote: Counting objects: 100% (23707/23707), done.
17remote: Compressing objects: 100% (21883/21883), done.
18remote: Total 23707 (delta 2248), reused 18837 (delta 1315), pack-reused 0 (from 0)
19Receiving objects: 100% (23707/23707), 1.45 GiB | 48.89 MiB/s, done.
20Resolving deltas: 100% (2248/2248), done.
21From https://us-east1-d.ci-gateway.int.gprd.gitlab.net:8989/gitlab-com/www-gitlab-com
22 * [new ref] refs/pipelines/1639858573 -> refs/pipelines/1639858573
23 * [new branch] master -> origin/master
24Checking out 8402f0ee as detached HEAD (ref is master)...
25Skipping Git submodules setup
26$ git remote set-url origin "${CI_REPOSITORY_URL}"
27 Executing "step_script" stage of the job script 00:01
28Using docker image sha256:c78f79ce571c009f21f956eca1f2a46d62efb505a11139eb8d3520c28739fc70 for debian:stable-slim with digest debian@sha256:b5ace515e78743215a1b101a6f17e59ed74b17132139ca3af3c37e605205e973 ...
29$ grep '^%meta{"http-equiv": "Content-Security-Policy", content: "default-src .* script-src .*"}' source/includes/layout/head.html.haml || (echo "The Content Security Policy appears to be disabled, please re-enable it before merging." ; exit 1)
30%meta{"http-equiv": "Content-Security-Policy", content: "default-src 'self' https: http:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: http:; style-src 'self' 'unsafe-inline' https: http:; object-src https: http:; base-uri 'self'; connect-src 'self' https: http: wss: ws:; frame-src 'self' https: http:; img-src 'self' https: http: data:; manifest-src 'self'; media-src 'self' https: http:; worker-src 'self' https: http:;"}
31 Cleaning up project directory and file based variables 00:01
32Job succeeded