xingcheng
/
FreshRSS
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #2250 from Alkarex/CSP_child-src

Browse Source 
Remove deprecated CSP child-src
pull/2253/head
Alexandre Alapetite 6 years ago committed by GitHub
parent 75a802f623 75356c64a2
commit 30e542a7b5
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Whitespace
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Unified View
Diff Options
Show Stats Download Patch File Download Diff File
  1. 2
      app/FreshRSS.php

2
app/FreshRSS.php
Unescape View File

@ -117,7 +117,7 @@ class FreshRSS extends Minz_FrontController {
} }
}, FreshRSS_Context::$user_conf->sharing)); }, FreshRSS_Context::$user_conf->sharing));
$connectSrc = count($urlToAuthorize) ? sprintf("; connect-src 'self' %s", implode(' ', $urlToAuthorize)) : ''; $connectSrc = count($urlToAuthorize) ? sprintf("; connect-src 'self' %s", implode(' ', $urlToAuthorize)) : '';
header(sprintf("Content-Security-Policy: default-src 'self'; child-src *; frame-src *; img-src * data:; media-src *%s", $connectSrc)); header(sprintf("Content-Security-Policy: default-src 'self'; frame-src *; img-src * data:; media-src *%s", $connectSrc));
break; break;
case 'stats': case 'stats':
header("Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline'"); header("Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline'");

Write Preview
Loading…
Cancel
Save