versia-pub/frontend
2
0
Fork 0
mirror of https://github.com/versia-pub/frontend.git synced 2025-12-06 16:38:20 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix: 🐛 Fix form-action CSP

Browse source
This commit is contained in:
Jesse Wierzbinski 2024-05-05 23:00:15 -10:00
parent d95c1c17f0
commit e0468c421d
No known key found for this signature in database
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
nuxt.config.ts
View file

@ -21,6 +21,8 @@ export default defineNuxtConfig({
contentSecurityPolicy: { contentSecurityPolicy: {
"img-src": ["'self'", "data:", "https:"], "img-src": ["'self'", "data:", "https:"],
"script-src": ["'nonce-{{nonce}}'", "'strict-dynamic'"], "script-src": ["'nonce-{{nonce}}'", "'strict-dynamic'"],
// Add https because of some browsers blocking form-action to 'self' if the page is from a redirect
"form-action": ["'self'", "https:"],
}, },
crossOriginResourcePolicy: "same-origin", crossOriginResourcePolicy: "same-origin",
xFrameOptions: "DENY", xFrameOptions: "DENY",