Skip to content

GitLab

  • Projects
  • Groups
  • Snippets
  • Help
    • Loading...
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
L lebara-onboarding-frontend
  • Project overview
    • Project overview
    • Details
    • Activity
    • Releases
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 0
    • Issues 0
    • List
    • Boards
    • Labels
    • Service Desk
    • Milestones
  • Jira
    • Jira
  • Merge requests 4
    • Merge requests 4
  • Operations
    • Operations
    • Incidents
  • Analytics
    • Analytics
    • Repository
    • Value Stream
  • Snippets
    • Snippets
  • Members
    • Members
  • Activity
  • Graph
  • Create a new issue
  • Commits
  • Issue Boards
Collapse sidebar
  • MobbScan-Integration
  • Lebara-Video
  • lebara-onboarding-frontend
  • Merge requests
  • !48

Closed
Created Jul 08, 2020 by Abraham Holgado Garcia@aholgadoOwner
  • Report abuse
Report abuse

[LEBV-270] Apply security policies to NGINX conf

  • Overview 1
  • Commits 2
  • Changes 1

Security risk report available in https://wiki.mobbeel.com/x/FwqR

Jira Issues:

LEBV-270

LEBV-271

I've only added a bunch of headers to the nginx configuration file, but to test it I've had to modified the environment.prod.ts to generate a docker image with the changed configuration so I can use it locally . The content of the file was:

export const environment = { production: true, customerAPIEndpoint: 'http://0.0.0.0:8080', googleAnalyticsID: 'UA-170647602-1', };

If you don't want to do that you just can pull the image mobbeelsolutions/lebara-video-customer-frontend:risk-latest that contains these changes to check that everything keeps working properly.

Edited Jul 09, 2020 by Abraham Holgado Garcia
Assignee
Assign to
Reviewer
Request review from
None
Milestone
None
Assign milestone
Time tracking
Source branch: fix/security_risks