diff options
| author | Guilhem Moulin <guilhem@fripost.org> | 2020-05-21 04:05:40 +0200 |
|---|---|---|
| committer | Guilhem Moulin <guilhem@fripost.org> | 2020-05-21 04:09:39 +0200 |
| commit | 74db26a0b16556199c94276dd40fd669750b6c20 (patch) | |
| tree | 3144709963fe8d5f9b8843a258be24b0e637bf85 | |
| parent | 49fad9bf3a558f6eb0691b016a30ddff4a61da34 (diff) | |
cgit: Tighten Content-Security-Policy.
Add frame-ancestors and form-action.
| -rw-r--r-- | roles/git/files/etc/nginx/sites-available/git | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/roles/git/files/etc/nginx/sites-available/git b/roles/git/files/etc/nginx/sites-available/git index 3f2bc7f..9e9d16e 100644 --- a/roles/git/files/etc/nginx/sites-available/git +++ b/roles/git/files/etc/nginx/sites-available/git @@ -26,7 +26,7 @@ server { include snippets/headers.conf; add_header Content-Security-Policy - "default-src 'none'; img-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self'"; + "default-src 'none'; img-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self'; frame-ancestors 'none'; form-action 'self'"; include snippets/ssl.conf; ssl_certificate ssl/git.fripost.org.pem; |