forked from AkkomaGang/akkoma
Merge branch 'bugfix/csp-remove-form-action' into 'develop'
http security: remove form-action from CSP definitions Closes #379 See merge request pleroma/pleroma!456
This commit is contained in:
commit
38f76d964f
1 changed files with 0 additions and 1 deletions
|
@ -32,7 +32,6 @@ defmodule Pleroma.Plugs.HTTPSecurityPlug do
|
||||||
[
|
[
|
||||||
"default-src 'none'",
|
"default-src 'none'",
|
||||||
"base-uri 'self'",
|
"base-uri 'self'",
|
||||||
"form-action *",
|
|
||||||
"frame-ancestors 'none'",
|
"frame-ancestors 'none'",
|
||||||
"img-src 'self' data: https:",
|
"img-src 'self' data: https:",
|
||||||
"media-src 'self' https:",
|
"media-src 'self' https:",
|
||||||
|
|
Loading…
Reference in a new issue