Troplo/pleroma-fe
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Merge branch 'csp-header' into 'develop'

Browse source 
Add Content-Security-Policy header

See merge request pleroma/pleroma-fe!856
This commit is contained in:
HJ 2019-07-10 18:44:27 +00:00
commit 0a7c60c303
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
build/dev-server.js
View file

@ -24,6 +24,9 @@ var devMiddleware = require('webpack-dev-middleware')(compiler, {
stats: { stats: {
colors: true, colors: true,
chunks: false chunks: false
},
headers: {
'content-security-policy': "base-uri 'self'; frame-ancestors 'none'; img-src 'self' data: https:; media-src 'self' https:; style-src 'self' 'unsafe-inline'; font-src 'self'; manifest-src 'self'; script-src 'self' 'unsafe-eval';"
} }
}) })