manifest-src self csp

This commit is contained in:
Collin M. Barrett 2019-07-28 19:39:20 -05:00
parent fd675a4151
commit 6111a4d927
2 changed files with 1 additions and 5 deletions

View file

@ -1,9 +1,5 @@
server {
listen 80 default_server;
include svr-includes/*;
add_header Content-Security-Policy "default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self' data:; style-src 'self';" always;
location ^~ /api {
rewrite ^/api/(.*)$ /$1 break;

View file

@ -7,7 +7,7 @@ server {
ssl_certificate /etc/nginx/cert/filterlists_cert.pem;
ssl_certificate_key /etc/nginx/cert/filterlists_key.pem;
add_header Content-Security-Policy "default-src 'none'; script-src 'self' 'unsafe-inline'; connect-src 'self'; img-src 'self' data:; style-src 'self';" always;
add_header Content-Security-Policy "default-src 'none'; script-src 'self' 'unsafe-inline'; connect-src 'self'; img-src 'self' data:; style-src 'self'; manifest-src 'self';" always;
location ^~ /api {
rewrite ^/api/(.*)$ /$1 break;