fix: 🐛 Fix form-action CSP

This commit is contained in:
Jesse Wierzbinski 2024-05-05 23:00:15 -10:00
parent d95c1c17f0
commit e0468c421d
No known key found for this signature in database

View file

@ -21,6 +21,8 @@ export default defineNuxtConfig({
contentSecurityPolicy: {
"img-src": ["'self'", "data:", "https:"],
"script-src": ["'nonce-{{nonce}}'", "'strict-dynamic'"],
// Add https because of some browsers blocking form-action to 'self' if the page is from a redirect
"form-action": ["'self'", "https:"],
},
crossOriginResourcePolicy: "same-origin",
xFrameOptions: "DENY",