Merge pull request #1701 from selfhoster1312/sso-csp-inline

Allow inline scripts for yunohost-portal (nginx CSP)
This commit is contained in:
Alexandre Aubin 2023-08-15 14:18:45 +02:00 committed by GitHub
commit a7580df7a9
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -13,5 +13,5 @@ location /yunohost/sso/ {
more_set_headers "Cache-Control: no-store, no-cache, must-revalidate";
}
more_set_headers "Content-Security-Policy: upgrade-insecure-requests; default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self'; object-src 'none'; img-src 'self' data:;";
more_set_headers "Content-Security-Policy: upgrade-insecure-requests; default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; object-src 'none'; img-src 'self' data:;";
}