From 56f96bd3bd6548644d6f51422b5c9426af034de4 Mon Sep 17 00:00:00 2001 From: "Collin M. Barrett" Date: Sat, 23 Jan 2021 18:12:22 -0600 Subject: [PATCH] =?UTF-8?q?feat(reverse-proxy):=20=E2=9C=A8=F0=9F=94=92=20?= =?UTF-8?q?give=20apis=20only=20connect-src=20csp?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- reverse-proxy/conf.d.dev/default.conf | 4 ++-- reverse-proxy/conf.d/default.conf | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/reverse-proxy/conf.d.dev/default.conf b/reverse-proxy/conf.d.dev/default.conf index f115d8c4f..926f9e613 100644 --- a/reverse-proxy/conf.d.dev/default.conf +++ b/reverse-proxy/conf.d.dev/default.conf @@ -6,14 +6,14 @@ server { rewrite ^/api/archival/(.*)$ /$1 break; proxy_pass http://archival-api:80; include location-includes/*; - add_header Content-Security-Policy "default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self';" always; + add_header Content-Security-Policy "default-src 'none'; connect-src 'self';" always; } location ^~ /api/directory/ { rewrite ^/api/directory/(.*)$ /$1 break; proxy_pass http://directory-api:80; include location-includes/*; - add_header Content-Security-Policy "default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self';" always; + add_header Content-Security-Policy "default-src 'none'; connect-src 'self';" always; } location ^~ /api/ { diff --git a/reverse-proxy/conf.d/default.conf b/reverse-proxy/conf.d/default.conf index d3fa4f8db..92f357b84 100644 --- a/reverse-proxy/conf.d/default.conf +++ b/reverse-proxy/conf.d/default.conf @@ -9,14 +9,14 @@ server { rewrite ^/api/archival/(.*)$ /$1 break; proxy_pass http://archival-api:80; include location-includes/*; - add_header Content-Security-Policy "default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self';" always; + add_header Content-Security-Policy "default-src 'none'; connect-src 'self';" always; } location ^~ /api/directory/ { rewrite ^/api/directory/(.*)$ /$1 break; proxy_pass http://directory-api:80; include location-includes/*; - add_header Content-Security-Policy "default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self';" always; + add_header Content-Security-Policy "default-src 'none'; connect-src 'self';" always; } location ^~ /api/ {