[#7677] fixed default ui csp to allow iframe/object previews
This commit is contained in:
+1
-1
@@ -22,7 +22,7 @@ import (
|
|||||||
"golang.org/x/crypto/acme/autocert"
|
"golang.org/x/crypto/acme/autocert"
|
||||||
)
|
)
|
||||||
|
|
||||||
const defaultCSP = "default-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' http://127.0.0.1:* https://tile.openstreetmap.org data: blob:; connect-src 'self' http://127.0.0.1:* https://nominatim.openstreetmap.org; script-src 'self' http://127.0.0.1:*; frame-src 'none'"
|
const defaultCSP = "default-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' http://127.0.0.1:* https://tile.openstreetmap.org data: blob:; connect-src 'self' http://127.0.0.1:* https://nominatim.openstreetmap.org; script-src 'self' http://127.0.0.1:*; frame-ancestors 'none'"
|
||||||
|
|
||||||
// ServeConfig defines a configuration struct for apis.Serve().
|
// ServeConfig defines a configuration struct for apis.Serve().
|
||||||
type ServeConfig struct {
|
type ServeConfig struct {
|
||||||
|
|||||||
Reference in New Issue
Block a user