IT36667: Tighten the CSP ruleset to disable unsafe-inline for the WebConsole.

APAR status

• Closed as program error.

Error description

• To enable the setting of the mqConsoleEnableUnsafeInline
  property which relaxes the CSP ruleset to enable unsafe-inline.
   This might make your configuration less secure, but is required
  by the Dashboard Web Console.
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  USERS AFFECTED:
  This affects users of IBM MQ WebConsole.
  
  
  Platforms affected:
  MultiPlatform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  Using the WebConsole by default relaxes the CSP ruleset and
  enables unsafe-inline on the Content Security Policy, which
  might make your configuration less secure.
  

Problem conclusion

• The source has been change to tighten CSP ruleset to enable
  unsafe-inline.  This has introduced a new property:
  
  setmqweb properties -k mqConsoleEnableUnsafeInline -v true
  
  Setting this property relaxes the CSP ruleset to enable
  unsafe-inline, which might make your configuration less secure,
  but is required by the Dashboard Web Console.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v9.2 LTS   9.2.0.7
  v9.x CD    9.2.1
  
  The latest available maintenance can be obtained from
  'WebSphere MQ Recommended Fixes'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
  
  If the maintenance level is not yet available information on
  its planned availability can be found in 'WebSphere MQ
  Planned Maintenance Release Dates'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  MQ BASE V9.2

• Fixed component ID

  5724H7281

Applicable component levels