web/cryptpad
2
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Fix CSP config error #348

Browse Source
This commit is contained in:
yflory 2019-03-25 10:24:23 +01:00
parent eee65bf435
commit 137ccbd237
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
config.example.js
View File

@ -20,7 +20,6 @@ var domain = ' ' + _domain;
var baseCSP = [ var baseCSP = [
"default-src 'none'", "default-src 'none'",
"style-src 'unsafe-inline' 'self' " + domain, "style-src 'unsafe-inline' 'self' " + domain,
"script-src 'self'" + domain,
"font-src 'self' data:" + domain, "font-src 'self' data:" + domain,
/* child-src is used to restrict iframes to a set of allowed domains. /* child-src is used to restrict iframes to a set of allowed domains.
@ -45,6 +44,7 @@ var baseCSP = [
// for accounts.cryptpad.fr authentication and cross-domain iframe sandbox // for accounts.cryptpad.fr authentication and cross-domain iframe sandbox
"frame-ancestors *", "frame-ancestors *",
""
]; ];