Enable debug and allow remote connect-src
This commit is contained in:
parent
af78df5663
commit
68ff51c26d
1
.env.dev
1
.env.dev
|
@ -19,3 +19,4 @@ STATIC_URL=http://localhost:8000/staticfiles/
|
|||
|
||||
# Customize to your needs
|
||||
POSTGRES_VERSION=11
|
||||
DEBUG=true
|
||||
|
|
|
@ -69,7 +69,7 @@ http {
|
|||
text/x-component
|
||||
text/x-cross-domain-policy;
|
||||
|
||||
add_header Content-Security-Policy "default-src 'self' 'unsafe-eval'; connect-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self' data:; object-src 'none'; media-src 'self' data:";
|
||||
add_header Content-Security-Policy "default-src 'self' 'unsafe-eval'; connect-src 'self' 'unsafe-eval' *; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self' data:; object-src 'none'; media-src 'self' data:";
|
||||
add_header Referrer-Policy "strict-origin-when-cross-origin";
|
||||
add_header X-Frame-Options "SAMEORIGIN" always;
|
||||
|
||||
|
|
Loading…
Reference in New Issue