summaryrefslogtreecommitdiff
path: root/etc
diff options
context:
space:
mode:
authorMarcello Stanisci <stanisci.m@gmail.com>2019-02-22 18:59:55 +0100
committerMarcello Stanisci <stanisci.m@gmail.com>2019-02-22 19:00:09 +0100
commit8dad02d7158f3d2b3f8cee17825effd6bf37ddbc (patch)
tree922ab04cad870a66ba28eb335749d0c59db883e7 /etc
parent3cb3f078cbb9fa50f2eaeead9225183ea2c18006 (diff)
downloaddeployment-8dad02d7158f3d2b3f8cee17825effd6bf37ddbc.tar.gz
deployment-8dad02d7158f3d2b3f8cee17825effd6bf37ddbc.tar.bz2
deployment-8dad02d7158f3d2b3f8cee17825effd6bf37ddbc.zip
Allow taler.net in CSP for style and script.
Diffstat (limited to 'etc')
-rw-r--r--etc/nginx/conf.d/talerssl2
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/nginx/conf.d/talerssl b/etc/nginx/conf.d/talerssl
index 05c6d32..4a932f8 100644
--- a/etc/nginx/conf.d/talerssl
+++ b/etc/nginx/conf.d/talerssl
@@ -10,5 +10,5 @@ add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; prelo
add_header X-XSS-Protection "1; mode=block";
add_header X-Frame-Options "SAMEORIGIN";
add_header X-Content-Type-Options "nosniff";
-add_header Content-Security-Policy "default-src 'self'; img-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; connect-src 'self' wss://buildbot.taler.net";
+add_header Content-Security-Policy "default-src 'self'; img-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.taler.net/dist/js/; style-src 'self' 'unsafe-inline' https://www.taler.net/dist/css/; connect-src 'self' wss://buildbot.taler.net";
add_header Referrer-Policy "same-origin";