From 7915b0597b690a829d53f325c5b5d1c5f74bbd7c Mon Sep 17 00:00:00 2001 From: Darren Nathanael Date: Fri, 17 Nov 2023 11:51:08 -0500 Subject: [PATCH] Revert "CSP - Upstream Patch (#239)" This reverts commit 2ed25cc843b88dc2e0d14099221fe16d6daf52fd. --- .github/workflows/docker.yml | 2 +- dpaste/settings/base.py | 5 ++--- 2 files changed, 3 insertions(+), 4 deletions(-) diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index a804cdb..cb32de6 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -59,6 +59,6 @@ jobs: builder: ${{ steps.buildx.outputs.name }} context: . file: ./Dockerfile - platforms: linux/amd64,linux/arm64,linux/ppc64le + platforms: linux/amd64,linux/arm64,linux/ppc64le,linux/i386 push: true tags: ${{ steps.prep.outputs.tags }} diff --git a/dpaste/settings/base.py b/dpaste/settings/base.py index 13a5019..3b61056 100644 --- a/dpaste/settings/base.py +++ b/dpaste/settings/base.py @@ -116,9 +116,8 @@ SECURE_BROWSER_XSS_FILTER = True SECURE_CONTENT_TYPE_NOSNIFF = True CSP_DEFAULT_SRC = ("'none'",) -# If you edit the CSS/JS update your 256 HASH here. -CSP_SCRIPT_SRC = ("'self'", "'unsafe-hashes'", "'sha256-634c702966ae36dcd81fe7a4c4756413be3b77af4f4a820651faecd1db1ab26a'",) -CSP_STYLE_SRC = ("'self'", "'unsafe-hashes'", "'sha256-7ac9cd7ab2811dac84cdc031d0acf0f355a2ab619f633b857f6db5b4c2b45361'") +CSP_SCRIPT_SRC = ("'self'", "'unsafe-inline'") +CSP_STYLE_SRC = ("'self'", "'unsafe-inline'") LOGGING = { "version": 1,