From 108cff594dd561f69ac947075bf5dd07bb8f0741 Mon Sep 17 00:00:00 2001 From: "Collin M. Barrett" Date: Mon, 7 Sep 2020 20:02:23 -0500 Subject: [PATCH] =?UTF-8?q?feat(reverse-proxy):=20=E2=9C=A8=20update=20csp?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- reverse-proxy/conf.d/default.conf | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/reverse-proxy/conf.d/default.conf b/reverse-proxy/conf.d/default.conf index 8f7799669..918a5e319 100644 --- a/reverse-proxy/conf.d/default.conf +++ b/reverse-proxy/conf.d/default.conf @@ -7,8 +7,8 @@ server { ssl_certificate /etc/nginx/cert/filterlists_cert.pem; ssl_certificate_key /etc/nginx/cert/filterlists_key.pem; - add_header Content-Security-Policy "default-src 'none'; script-src 'self' 'unsafe-inline'; connect-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; manifest-src 'self';" always; - + add_header Content-Security-Policy "default-src 'none'; connect-src 'self'; img-src 'self' data:; manifest-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'; require-trusted-types-for 'script';" always; + location ^~ /api { rewrite ^/api/(.*)$ /$1 break; proxy_pass http://directory-api:80;