mirror of
https://github.com/collinbarrett/FilterLists.git
synced 2026-03-11 09:04:27 +00:00
fix(reverse-proxy): 🐛🚑 allow connect-src for web and api-docs
This commit is contained in:
parent
f885b0a519
commit
613b204c44
2 changed files with 3 additions and 3 deletions
|
|
@ -20,6 +20,6 @@ server {
|
|||
rewrite ^/api/(.*)$ /$1 break;
|
||||
proxy_pass http://api-docs:8080;
|
||||
include location-includes/*;
|
||||
add_header Content-Security-Policy "upgrade-insecure-requests; default-src 'none'; base-uri 'none'; frame-ancestors 'none'; form-action 'none'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' validator.swagger.io data:;" always;
|
||||
add_header Content-Security-Policy "upgrade-insecure-requests; default-src 'none'; base-uri 'none'; frame-ancestors 'none'; form-action 'none'; connect-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' validator.swagger.io data:;" always;
|
||||
}
|
||||
}
|
||||
|
|
@ -23,13 +23,13 @@ server {
|
|||
rewrite ^/api/(.*)$ /$1 break;
|
||||
proxy_pass http://api-docs:8080;
|
||||
include location-includes/*;
|
||||
add_header Content-Security-Policy "upgrade-insecure-requests; default-src 'none'; base-uri 'none'; frame-ancestors 'none'; form-action 'none'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' validator.swagger.io data:;" always;
|
||||
add_header Content-Security-Policy "upgrade-insecure-requests; default-src 'none'; base-uri 'none'; frame-ancestors 'none'; form-action 'none'; connect-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' validator.swagger.io data:;" always;
|
||||
}
|
||||
|
||||
location / {
|
||||
proxy_pass http://web:80;
|
||||
include location-includes/*;
|
||||
add_header Content-Security-Policy "upgrade-insecure-requests; default-src 'none'; base-uri 'none'; frame-ancestors 'none'; form-action 'none'; script-src 'self'; style-src 'self'; img-src 'self' data:; manifest-src 'self';" always;
|
||||
add_header Content-Security-Policy "upgrade-insecure-requests; default-src 'none'; base-uri 'none'; frame-ancestors 'none'; form-action 'none'; connect-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; manifest-src 'self';" always;
|
||||
}
|
||||
}
|
||||
|
||||
|
|
|
|||
Loading…
Reference in a new issue