Commit 1f1214a
Eric Bower
·
2025-08-02 15:09:20 -0400 EDT
parent f13d251
fix(pastes): allow script-src
1 files changed,
+1,
-1
+1,
-1
| ... | ... | @@ -53,7 +53,7 @@ | |
| 53 | 53 | # keep referrer data off of HTTP connections | |
| 54 | 54 | Referrer-Policy no-referrer-when-downgrade | |
| 55 | 55 | ||
| 56 | - | Content-Security-Policy "default-src 'self'; img-src * 'unsafe-inline'; style-src * 'unsafe-inline'" | |
| 56 | + | Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; img-src * 'unsafe-inline'; style-src * 'unsafe-inline' | |
| 57 | 57 | ||
| 58 | 58 | X-XSS-Protection "1; mode=block" | |
| 59 | 59 | } |