Document changes of CSP and X_XSS_Protection

[swatiganesh]

🔩 Description: What code changed, and why?

Document changes of CSP and X-XSS-Protection

Default value of CSP:
content_security_policy = "default-src 'self';frame-ancestors 'self';"

Configuration of CSP:

[load_balancer.v1.sys.ngx.http]
content_security_policy = "default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self';"

Default value of X-XSS-Protection
x_xss_protection = "1; mode=block"

Configuration of X-XSS-Protection

[global.v1.sys.ngx.http]
x_xss_protection = "0"

⛓️ Related Resources

https://progresssoftware.atlassian.net/browse/CHEF-13481

👍 Definition of Done

👟 How to Build and Test the Change

✅ Checklist

All PRs must tick these:

• I have read the CONTRIBUTING document.
• All commits signed-off for the Developer Certification of Origin.

With occasional exceptions, all PRs from Progress employees must tick these:

• Is the code clear? (complicated code or lots of comments--subdivide and use well-named methods, meaningful variable names, etc.)
• Consistency checked? (user notifications, user prompts, visual patterns, code patterns, variable names)
• Repeated code blocks eliminated? (adapt and reuse existing components, blocks, functions, etc.)
• Spelling, grammar, typos checked? (at a minimum use make spell in any component directory)
• Code well-formatted? (indents, line breaks, etc. improve rather than hinder readability)

All PRs from Progress employees should tick these if appropriate:

• Tests added/updated? (all new code needs new tests)
• Docs added/updated? (all customer-facing changes)

Please add a note next to any checkbox above if you are NOT ticking it.

📷 Screenshots, if applicable

[netlify]

✅ Deploy Preview for chef-automate ready!

Name	Link
🔨 Latest commit	1f44d02
🔍 Latest deploy log	https://app.netlify.com/sites/chef-automate/deploys/67ab03f6b534e8000873916d
😎 Deploy Preview	https://deploy-preview-8785--chef-automate.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify site configuration.

[sonarqube-for-infrastructure-prod]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarQube