Handle manifest-src in CSP (#231)

main
Shimul 2021-03-21 05:22:06 +05:30 committed by Ben Busby
parent 2114cb87c0
commit 337d0ebe37
1 changed files with 1 additions and 0 deletions

View File

@ -41,6 +41,7 @@ app.config['BANG_FILE'] = os.path.join(
app.config['BANG_PATH'], app.config['BANG_PATH'],
'bangs.json') 'bangs.json')
app.config['CSP'] = 'default-src \'none\';' \ app.config['CSP'] = 'default-src \'none\';' \
'manifest-src \'self\';' \
'img-src \'self\';' \ 'img-src \'self\';' \
'style-src \'self\' \'unsafe-inline\';' \ 'style-src \'self\' \'unsafe-inline\';' \
'script-src \'self\';' \ 'script-src \'self\';' \