csp - style-src: unsafe-inline

This commit is contained in:
Collin M. Barrett 2019-09-02 15:26:12 -05:00
parent 05f680e646
commit 889b6f8fd9

View file

@ -7,7 +7,7 @@ server {
ssl_certificate /etc/nginx/cert/filterlists_cert.pem;
ssl_certificate_key /etc/nginx/cert/filterlists_key.pem;
add_header Content-Security-Policy "default-src 'none'; script-src 'self' 'unsafe-inline'; connect-src 'self'; img-src 'self' data:; style-src 'self'; manifest-src 'self';" always;
add_header Content-Security-Policy "default-src 'none'; script-src 'self' 'unsafe-inline'; connect-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; manifest-src 'self';" always;
location ^~ /api {
rewrite ^/api/(.*)$ /$1 break;