diff --git a/reverse-proxy/conf.d.dev/default.conf b/reverse-proxy/conf.d.dev/default.conf index f115d8c4f..926f9e613 100644 --- a/reverse-proxy/conf.d.dev/default.conf +++ b/reverse-proxy/conf.d.dev/default.conf @@ -6,14 +6,14 @@ server { rewrite ^/api/archival/(.*)$ /$1 break; proxy_pass http://archival-api:80; include location-includes/*; - add_header Content-Security-Policy "default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self';" always; + add_header Content-Security-Policy "default-src 'none'; connect-src 'self';" always; } location ^~ /api/directory/ { rewrite ^/api/directory/(.*)$ /$1 break; proxy_pass http://directory-api:80; include location-includes/*; - add_header Content-Security-Policy "default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self';" always; + add_header Content-Security-Policy "default-src 'none'; connect-src 'self';" always; } location ^~ /api/ { diff --git a/reverse-proxy/conf.d/default.conf b/reverse-proxy/conf.d/default.conf index d3fa4f8db..92f357b84 100644 --- a/reverse-proxy/conf.d/default.conf +++ b/reverse-proxy/conf.d/default.conf @@ -9,14 +9,14 @@ server { rewrite ^/api/archival/(.*)$ /$1 break; proxy_pass http://archival-api:80; include location-includes/*; - add_header Content-Security-Policy "default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self';" always; + add_header Content-Security-Policy "default-src 'none'; connect-src 'self';" always; } location ^~ /api/directory/ { rewrite ^/api/directory/(.*)$ /$1 break; proxy_pass http://directory-api:80; include location-includes/*; - add_header Content-Security-Policy "default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self';" always; + add_header Content-Security-Policy "default-src 'none'; connect-src 'self';" always; } location ^~ /api/ {