https://www.employees.org/~jdal/tags/xss/ Recent content in XSS on Jean-François Dal Hugo -- gohugo.io en © 2026 Jean-François Dal Fri, 05 Jun 2026 00:00:00 +0000 https://www.employees.org/~jdal/tech/ise/cspv2/ Fri, 05 Jun 2026 00:00:00 +0000 https://www.employees.org/~jdal/tech/ise/cspv2/ ISEv3.5 tightened its Content Security Policy header and removed unsafe-inline and unsafe-eval. If your custom portal relies on those, it will break after the upgrade. Here is what changed, why it matters, and how the PSIRT advisory ties into it.