From 30a7d4a19dee62acc7d8f1917e94c0a607b45511 Mon Sep 17 00:00:00 2001 From: Pierre-Yves Chibon Date: Thu, 28 Nov 2019 09:56:59 +0100 Subject: [PATCH] disgit/pagure: moving mdapi from connect-src to script-src Signed-off-by: Pierre-Yves Chibon --- roles/distgit/pagure/templates/pagure.cfg | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/roles/distgit/pagure/templates/pagure.cfg b/roles/distgit/pagure/templates/pagure.cfg index 2b62139596..dbd744a1b2 100644 --- a/roles/distgit/pagure/templates/pagure.cfg +++ b/roles/distgit/pagure/templates/pagure.cfg @@ -300,12 +300,12 @@ HTTP_REPO_ACCESS_GITOLITE = None CSP_HEADERS = ( "default-src 'self';" - "script-src 'self' '{nonce_script}' https://apps.fedoraproject.org; " + "script-src 'self' '{nonce_script}' https://apps.fedoraproject.org https://mdapi.fedoraproject.org; " "style-src 'self' '{nonce_style}'; " "object-src 'none';" "base-uri 'self';" "img-src 'self' https:;" - "connect-src 'self' https://pdc.fedoraproject.org https://mdapi.fedoraproject.org;" + "connect-src 'self' https://pdc.fedoraproject.org;" ) {% include "pagure_shared.cfg" %}