From 6b226530d4185f651c21b51d40b02bb86148cb0b Mon Sep 17 00:00:00 2001 From: Patrick Uiterwijk <puiterwijk@redhat.com> Date: Fri, 4 May 2018 12:08:49 +0200 Subject: [PATCH] Allow inline style for pagure Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com> --- roles/pagure/frontend/templates/securityheaders.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/roles/pagure/frontend/templates/securityheaders.conf b/roles/pagure/frontend/templates/securityheaders.conf index 057385f09e..10e0cd82ec 100644 --- a/roles/pagure/frontend/templates/securityheaders.conf +++ b/roles/pagure/frontend/templates/securityheaders.conf @@ -2,4 +2,4 @@ Header always set X-Frame-Options "ALLOW-FROM https://pagure.io/" Header always set X-Xss-Protection "1; mode=block" Header always set X-Content-Type-Options "nosniff" Header always set Referrer-Policy "same-origin" -Header always set Content-Security-Policy "default-src 'self' https:; script-src 'self' 'unsafe-inline' https://apps.fedoraproject.org" +Header always set Content-Security-Policy "default-src 'self' https:; script-src 'self' 'unsafe-inline' https://apps.fedoraproject.org; style-src 'self' 'unsafe-inline' https://apps.fedoraproject.org"