fix(api-docs): 🐛 disable unsafe-inline style-src

ref https://github.com/swagger-api/swagger-ui/pull/5578
This commit is contained in:
Collin M. Barrett 2021-01-24 13:10:58 -06:00
parent 44bae636a7
commit 29b6517569
2 changed files with 2 additions and 2 deletions

View file

@ -20,6 +20,6 @@ server {
rewrite ^/api/(.*)$ /$1 break;
proxy_pass http://api-docs:8080;
include location-includes/*;
add_header Content-Security-Policy "default-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'none'; connect-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' validator.swagger.io data:;" always;
add_header Content-Security-Policy "default-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'none'; connect-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self'; img-src 'self' validator.swagger.io data:;" always;
}
}

View file

@ -23,7 +23,7 @@ server {
rewrite ^/api/(.*)$ /$1 break;
proxy_pass http://api-docs:8080;
include location-includes/*;
add_header Content-Security-Policy "default-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'none'; connect-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' validator.swagger.io data:;" always;
add_header Content-Security-Policy "default-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'none'; connect-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self'; img-src 'self' validator.swagger.io data:;" always;
}
location / {