mirror of
https://github.com/onionshare/onionshare.git
synced 2025-02-25 17:01:21 -05:00
Merge pull request #1337 from mig5/update_csp
Update the Content-Security-Policy
This commit is contained in:
commit
650bf93128
@ -310,7 +310,7 @@ class Web:
|
|||||||
if not self.settings.get("website", "disable_csp") or self.mode != "website":
|
if not self.settings.get("website", "disable_csp") or self.mode != "website":
|
||||||
r.headers.set(
|
r.headers.set(
|
||||||
"Content-Security-Policy",
|
"Content-Security-Policy",
|
||||||
"default-src 'self'; style-src 'self'; script-src 'self'; img-src 'self' data:;",
|
"default-src 'self'; frame-ancestors 'none'; form-action 'self'; base-uri 'self'; img-src 'self' data:;",
|
||||||
)
|
)
|
||||||
return r
|
return r
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user