Skip to content
Snippets Groups Projects
Commit 1fc95a83 authored by Frédéric Guillot's avatar Frédéric Guillot
Browse files

Include 'self' in CSP when using custom styles

parent cc888e2a
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
template/templates/common/layout.html
+ 1
− 1
View file @ 1fc95a83
......@@ -34,7 +34,7 @@
{{ if and .user .user.Stylesheet }}
{{ $stylesheetNonce := nonce }}
<meta http-equiv="Content-Security-Policy" content="default-src 'self'; img-src * data:; media-src *; frame-src *; style-src 'nonce-{{ $stylesheetNonce }}'">
<meta http-equiv="Content-Security-Policy" content="default-src 'self'; img-src * data:; media-src *; frame-src *; style-src 'self' 'nonce-{{ $stylesheetNonce }}'">
<style nonce="{{ $stylesheetNonce }}">{{ .user.Stylesheet | safeCSS }}</style>
{{ else }}
<meta http-equiv="Content-Security-Policy" content="default-src 'self'; img-src * data:; media-src *; frame-src *">
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment