From 889b6f8fd9167a448b00476d9bb8e8bb94e69f53 Mon Sep 17 00:00:00 2001 From: "Collin M. Barrett" Date: Mon, 2 Sep 2019 15:26:12 -0500 Subject: [PATCH] csp - style-src: unsafe-inline --- ops/nginx/conf.d/filterlists.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ops/nginx/conf.d/filterlists.conf b/ops/nginx/conf.d/filterlists.conf index d6921cdd1..758764ac4 100644 --- a/ops/nginx/conf.d/filterlists.conf +++ b/ops/nginx/conf.d/filterlists.conf @@ -7,7 +7,7 @@ server { ssl_certificate /etc/nginx/cert/filterlists_cert.pem; ssl_certificate_key /etc/nginx/cert/filterlists_key.pem; - add_header Content-Security-Policy "default-src 'none'; script-src 'self' 'unsafe-inline'; connect-src 'self'; img-src 'self' data:; style-src 'self'; manifest-src 'self';" always; + add_header Content-Security-Policy "default-src 'none'; script-src 'self' 'unsafe-inline'; connect-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; manifest-src 'self';" always; location ^~ /api { rewrite ^/api/(.*)$ /$1 break;