Disroot-Ansible
/
nginx
11
1
Fork 0
Code Pull Requests 4 Projects Releases Activity

cryptpad - fixed unsafe csp header directives for sandbox (#24) 

Co-authored-by: muppeth <muppeth@disroot.org>
Reviewed-on: #24
Reviewed-by: meaz <meaz@no-reply@disroot.org>
This commit is contained in:
muppeth 2022-05-10 19:27:56 +00:00
parent 541f4cdfef
commit 18283258c9
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
templates/etc/nginx/sites-available/cryptpad.j2
View File

@ -91,7 +91,7 @@
# privileged contexts allow a few more rights than unprivileged contexts, though limits are still applied
if ($unsafe) {
set $scriptSrc "'self' 'unsafe-eval' 'unsafe-inline' resource: ${main_domain}";
set $scriptSrc "'self' 'unsafe-eval' 'unsafe-inline' resource: https://${main_domain}";
}
# Finally, set all the rules you composed above.