Fixing QR code CSP, try 2. Fixes #2241 (#2242)

Co-authored-by: SleeplessOne1917 <insomnia_void@protonmail.com>
This commit is contained in:
Dessalines 2023-11-28 09:56:28 -05:00 committed by GitHub
parent aafcfaf649
commit 69a3a63dfd
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -16,12 +16,11 @@ export function setDefaultCsp({
`default-src 'self'; `default-src 'self';
manifest-src *; manifest-src *;
connect-src *; connect-src *;
img-src * data:; img-src * data: blob:;
script-src 'self' 'nonce-${res.locals.cspNonce}'; script-src 'self' 'nonce-${res.locals.cspNonce}';
style-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';
form-action 'self'; form-action 'self';
base-uri 'self'; base-uri 'self';
blob: 'self';
frame-src *; frame-src *;
media-src * data:`.replace(/\s+/g, " "), media-src * data:`.replace(/\s+/g, " "),
); );