mirror of
https://github.com/Novaloop-AG/healthchat-web.git
synced 2026-11-04 00:48:47 +00:00
Merge pull request #17818 from vector-im/gsouquet/fix-6162
Enhance security by disallowing CSP object-src rule
This commit is contained in:
@@ -35,7 +35,6 @@
|
||||
worker-src 'self';
|
||||
frame-src * blob: data:;
|
||||
form-action 'self';
|
||||
object-src 'self';
|
||||
manifest-src 'self';
|
||||
">
|
||||
<% for (var i=0; i < htmlWebpackPlugin.files.css.length; i++) {
|
||||
|
||||
Reference in New Issue
Block a user