[Xymon] Problems with Content Security Policy in Safari, Chrome, and IE

[John Thurston]

I doubt this error is being caused by the CSP settings. I believe those 
settings are interpreted by the web browser. I suspect this is caused by 
mismatch between the name published on your proxy and the name known by 
the xymon server.

Take a look in enadis.c. Lines 78-84 detect and print the error message 
you see. Line 82 contains the text:
   return; /* Just display, don't do anything */

which makes me think it is not affecting the behavior. Only throwing a 
message in the logs.


--
    Do things because you should, not just because you can.

John Thurston    907-465-8591
John.Thurston at alaska.gov
Department of Administration
State of Alaska

On 3/21/2018 4:18 AM, Hansen, Rene H wrote:
> [Tue Mar 20 16:54:05.786245 2018] [cgi:error] [pid 9121] [client 
> 172.28.56.243:60696] AH01215: 2018-03-20 16:54:05.786123 Enadis POST 
> that is not coming from self or svcstatus 
> (referer=https://xxxyyy.dk/xymon-seccgi/enadis.sh). Ignoring., referer: 
> https://xxxyyy.dk/xymon-seccgi/enadis.sh
>