disgit/pagure: moving mdapi from connect-src to script-src
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
This commit is contained in:
parent
7f4b929694
commit
30a7d4a19d
1 changed files with 2 additions and 2 deletions
|
@ -300,12 +300,12 @@ HTTP_REPO_ACCESS_GITOLITE = None
|
|||
|
||||
CSP_HEADERS = (
|
||||
"default-src 'self';"
|
||||
"script-src 'self' '{nonce_script}' https://apps.fedoraproject.org; "
|
||||
"script-src 'self' '{nonce_script}' https://apps.fedoraproject.org https://mdapi.fedoraproject.org; "
|
||||
"style-src 'self' '{nonce_style}'; "
|
||||
"object-src 'none';"
|
||||
"base-uri 'self';"
|
||||
"img-src 'self' https:;"
|
||||
"connect-src 'self' https://pdc.fedoraproject.org https://mdapi.fedoraproject.org;"
|
||||
"connect-src 'self' https://pdc.fedoraproject.org;"
|
||||
)
|
||||
|
||||
{% include "pagure_shared.cfg" %}
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue