I encountered three security-related issues when using elasticserrch version 7.6.1. Thank you for your help

[Frank_Hassanabad]

This part of the forums is primarily for security related things such as endpoints, SIEM, etc...

You would probably be better off posting to:

Elastic Stack

And using the tags of elastic-stack-security

You can also search around here or on google for some some of those keywords and there's a lot of forum posts explaining the content security policies and how you can change them to suit your needs such as this one:

Is unsafe-eval required for script-src in the content-security-policy for Kibana 6.7.1?

Hi @LizaD - Thank you for the quick reply. I already reviewed that post before I raised my question - it unfortunately does not address my question. What I'd like to do is to set the csp.rules parameter in the kibana.yml file to no longer have unsafe-eval for script-src - to make it more secure: https://www.elastic.co/guide/en/kibana/6.7/settings.html However, I do not know whether removing unsafe-eval from script-src will cause any issues with the list of Kibana functions below: Discover …

Either way, welcome, and good luck on your journeys and when it comes to security, I would always recommend using our latest versions of the stack as well