Debug CSP: temporarily allow inline scripts and remove SRI requirement
ci/woodpecker/push/woodpecker Pipeline failed
Details
ci/woodpecker/push/woodpecker Pipeline failed
Details
This commit is contained in:
parent
905b480a2e
commit
885914812d
|
@ -26,7 +26,7 @@
|
||||||
Cross-Origin-Opener-Policy "same-origin"
|
Cross-Origin-Opener-Policy "same-origin"
|
||||||
|
|
||||||
# Simplified CSP for static content
|
# Simplified CSP for static content
|
||||||
Content-Security-Policy "default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self' data:; font-src 'self' data:; connect-src 'self'; object-src 'none'; frame-ancestors 'none'; base-uri 'none'; form-action 'none'; require-sri-for script;"
|
Content-Security-Policy "default-src 'none'; script-src 'self' 'unsafe-inline'; style-src 'self'; img-src 'self' data:; font-src 'self' data:; connect-src 'self'; object-src 'none'; frame-ancestors 'none'; base-uri 'none'; form-action 'none';"
|
||||||
}
|
}
|
||||||
|
|
||||||
# Handle 404s
|
# Handle 404s
|
||||||
|
|
Loading…
Reference in New Issue