mirror of
https://github.com/versia-pub/frontend.git
synced 2025-12-06 08:28:20 +01:00
fix: 🐛 Fix form-action CSP
This commit is contained in:
parent
d95c1c17f0
commit
e0468c421d
|
|
@ -21,6 +21,8 @@ export default defineNuxtConfig({
|
|||
contentSecurityPolicy: {
|
||||
"img-src": ["'self'", "data:", "https:"],
|
||||
"script-src": ["'nonce-{{nonce}}'", "'strict-dynamic'"],
|
||||
// Add https because of some browsers blocking form-action to 'self' if the page is from a redirect
|
||||
"form-action": ["'self'", "https:"],
|
||||
},
|
||||
crossOriginResourcePolicy: "same-origin",
|
||||
xFrameOptions: "DENY",
|
||||
|
|
|
|||
Loading…
Reference in a new issue