disgit/pagure: moving mdapi from connect-src to script-src

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
This commit is contained in:
Pierre-Yves Chibon 2019-11-28 09:56:59 +01:00
parent 7f4b929694
commit 30a7d4a19d

View file

@ -300,12 +300,12 @@ HTTP_REPO_ACCESS_GITOLITE = None
CSP_HEADERS = (
"default-src 'self';"
"script-src 'self' '{nonce_script}' https://apps.fedoraproject.org; "
"script-src 'self' '{nonce_script}' https://apps.fedoraproject.org https://mdapi.fedoraproject.org; "
"style-src 'self' '{nonce_style}'; "
"object-src 'none';"
"base-uri 'self';"
"img-src 'self' https:;"
"connect-src 'self' https://pdc.fedoraproject.org https://mdapi.fedoraproject.org;"
"connect-src 'self' https://pdc.fedoraproject.org;"
)
{% include "pagure_shared.cfg" %}