distgit/pagure: Allow the html to connect to apps.fp.o and mdapi.fp.o

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
This commit is contained in:
Pierre-Yves Chibon 2020-02-07 17:20:18 +01:00
parent 1d2cb5c54d
commit a232c72149

View file

@ -290,13 +290,13 @@ PROJECT_NAME_REGEX = '^[a-zA-z0-9_][a-zA-Z0-9-_\.+]*$'
HTTP_REPO_ACCESS_GITOLITE = None
CSP_HEADERS = (
"default-src 'self';"
"default-src 'self'; "
"script-src 'self' '{nonce_script}' https://apps.fedoraproject.org https://mdapi.fedoraproject.org; "
"style-src 'self' '{nonce_style}'; "
"object-src 'none';"
"base-uri 'self';"
"img-src 'self' https:;"
"connect-src 'self' https://pdc.fedoraproject.org;"
"object-src 'none'; "
"base-uri 'self'; "
"img-src 'self' https:; "
"connect-src 'self' https://pdc.fedoraproject.org https://apps.fedoraproject.org https://mdapi.fedoraproject.org;"
)
{% include "pagure_shared.cfg" %}