sliver/admin-fe
1
0
Fork 0
forked from AkkomaGang/admin-fe
Code Pull requests Activity

Merge branch 'feature/dev-csp-headers' into 'master'

Browse source 
Add Content-Security-Policy header

See merge request pleroma/admin-fe!14
This commit is contained in:
feld 2019-05-07 20:35:50 +00:00
commit 8e174b6365
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
build/webpack.dev.conf.js
View file

@ -46,6 +46,9 @@ const devWebpackConfig = merge(baseWebpackConfig, {
quiet: true, // necessary for FriendlyErrorsPlugin quiet: true, // necessary for FriendlyErrorsPlugin
watchOptions: { watchOptions: {
poll: config.dev.poll poll: config.dev.poll
},
headers: {
'content-security-policy': "base-uri 'self'; frame-ancestors 'none'; img-src 'self' data: https:; media-src 'self' https:; style-src 'self' 'unsafe-inline'; font-src 'self'; manifest-src 'self'; script-src 'self';"
} }
}, },
plugins: [ plugins: [