Miniflux needs form-action 'self'

Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
Tommy 2024-06-30 12:37:44 -07:00
parent ab5fb14232
commit 5a3ac8cbd7
No known key found for this signature in database
GPG Key ID: 555C902A34EC968F

View File

@ -19,7 +19,7 @@ server {
include snippets/proxy.conf;
proxy_hide_header Content-Security-Policy;
add_header Content-Security-Policy "default-src 'none'; connect-src 'self'; frame-src *; img-src *; manifest-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; base-uri 'none'; block-all-mixed-content; form-action 'none'; frame-ancestors 'self'; upgrade-insecure-requests";
add_header Content-Security-Policy "default-src 'none'; connect-src 'self'; frame-src *; img-src *; manifest-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; base-uri 'none'; block-all-mixed-content; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests";
location / {
proxy_pass http://127.0.0.1:8080;