From b5a6386526e28b27636dcdec5b9a56712f7c80cb Mon Sep 17 00:00:00 2001 From: Tommy Date: Sat, 29 Jun 2024 16:54:37 -0700 Subject: [PATCH] Reorganize Miniflux CSP Signed-off-by: Tommy --- etc/nginx/conf.d/sites_miniflux.conf | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/etc/nginx/conf.d/sites_miniflux.conf b/etc/nginx/conf.d/sites_miniflux.conf index 1b1bde5..726d171 100644 --- a/etc/nginx/conf.d/sites_miniflux.conf +++ b/etc/nginx/conf.d/sites_miniflux.conf @@ -19,9 +19,9 @@ server { include snippets/proxy.conf; proxy_hide_header Content-Security-Policy; - add_header Content-Security-Policy "default-src 'none'; connect-src 'self'; frame-src *; img-src *; manifest-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; frame-ancestors 'self'; block-all-mixed-content; base-uri 'none'"; + add_header Content-Security-Policy "default-src 'none'; connect-src 'self'; frame-src *; img-src *; manifest-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; base-uri 'none'; block-all-mixed-content; form-action 'none'; frame-ancestors 'self'; upgrade-insecure-requests"; location / { proxy_pass http://127.0.0.1:8080; } -} \ No newline at end of file +}