From a232c72149891f6fd56b37376d4637cd45e8a726 Mon Sep 17 00:00:00 2001 From: Pierre-Yves Chibon Date: Fri, 7 Feb 2020 17:20:18 +0100 Subject: [PATCH] distgit/pagure: Allow the html to connect to apps.fp.o and mdapi.fp.o Signed-off-by: Pierre-Yves Chibon --- roles/distgit/pagure/templates/pagure.cfg | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/roles/distgit/pagure/templates/pagure.cfg b/roles/distgit/pagure/templates/pagure.cfg index 411af48231..9110f1acec 100644 --- a/roles/distgit/pagure/templates/pagure.cfg +++ b/roles/distgit/pagure/templates/pagure.cfg @@ -290,13 +290,13 @@ PROJECT_NAME_REGEX = '^[a-zA-z0-9_][a-zA-Z0-9-_\.+]*$' HTTP_REPO_ACCESS_GITOLITE = None CSP_HEADERS = ( - "default-src 'self';" + "default-src 'self'; " "script-src 'self' '{nonce_script}' https://apps.fedoraproject.org https://mdapi.fedoraproject.org; " "style-src 'self' '{nonce_style}'; " - "object-src 'none';" - "base-uri 'self';" - "img-src 'self' https:;" - "connect-src 'self' https://pdc.fedoraproject.org;" + "object-src 'none'; " + "base-uri 'self'; " + "img-src 'self' https:; " + "connect-src 'self' https://pdc.fedoraproject.org https://apps.fedoraproject.org https://mdapi.fedoraproject.org;" ) {% include "pagure_shared.cfg" %}