mirror of
https://github.com/FreshRSS/FreshRSS.git
synced 2026-11-08 18:42:54 -05:00
Merge branch 'CSP-no-inline' into dev
This commit is contained in:
commit
e0fe98d74f
1 file changed
+1
-1
+1
-1
@@ -168,7 +168,7 @@ class FreshRSS extends Minz_FrontController {
|
||||
}
|
||||
|
||||
public static function preLayout() {
|
||||
header("Content-Security-Policy: default-src 'self'; img-src * data:; media-src *; style-src 'self' 'unsafe-inline'");
|
||||
header("Content-Security-Policy: default-src 'self'; child-src *; img-src * data:; media-src *; style-src 'self' 'unsafe-inline'");
|
||||
self::setJavascriptCookie();
|
||||
}
|
||||
|
||||
|
||||
Reference in new issue
Block a user