beenull/linx-server
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

allow unsafe-inline for style-src for now

Browse source 
This is used for the upload progress bar. Hopefully we can find a better
solution in the future for this.
This commit is contained in:
mutantmonkey 2015-10-04 15:11:23 -07:00
parent 5e7e96af01
commit e030c07f94
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
server.go
View file

@ -135,7 +135,7 @@ func main() {
flag.BoolVar(&Config.remoteUploads, "remoteuploads", false,
"enable remote uploads")
flag.StringVar(&Config.contentSecurityPolicy, "contentSecurityPolicy",
"default-src 'self'; img-src 'self' data:; referrer none;",
"default-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; referrer none;",
"value of default Content-Security-Policy header")
flag.StringVar(&Config.fileContentSecurityPolicy, "fileContentSecurityPolicy",
"default-src 'none'; img-src 'self'; object-src 'self'; media-src 'self'; sandbox; referrer none;",