gaugendre/python-blog
Archived
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Add some more CSP stuff

Browse source
This commit is contained in:
Gabriel Augendre 2021-04-24 09:19:48 +02:00
parent 4c3b799113
commit b0ed4c8327
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
blog/settings.py
View file

@ -227,3 +227,5 @@ CSP_CONNECT_SRC = ("'self'", https_goatcounter_domain)
CSP_STYLE_SRC = ("'self'", "'unsafe-inline'") CSP_STYLE_SRC = ("'self'", "'unsafe-inline'")
CSP_MANIFEST_SRC = ("'self'",) CSP_MANIFEST_SRC = ("'self'",)
CSP_FONT_SRC = ("'self'",) CSP_FONT_SRC = ("'self'",)
CSP_BASE_URI = ("'none'",)
CSP_FORM_ACTION = ("'self'",)