0021164: CSP headers are no longer sent when using current master branch

ID	Project	Category	View Status	Date Submitted	Last Update
0021164	mantisbt	security	public	2016-06-27 10:30	2016-08-14 09:34

Reporter	atrol	Assigned To	syncguru
Priority	normal	Severity	major	Reproducibility	always
Status	closed	Resolution	no change required

Summary	0021164: CSP headers are no longer sent when using current master branch
Description	In branch master-1.3.x we sent header: content-security-policy:"img-src 'self' http://www.gravatar.com/" This has been removed in master branch.
Tags	modern-ui

syncguru 2016-08-13 12:31 developer ~0053781	@atrol - I see identical logic in both branches for Gravatar.php I am resolving this as no-change... please reopen and add more details to which files you see inconsistency.

atrol 2016-08-14 09:34 developer ~0053791	Seems I got confused with my setups when dealing with 0021165

related to	0017491	closed	atrol	Avatars are not showing on Firefox
related to	0021165	closed	vboctor	Using database configuration to enable gravatars does not work