|
|
@ -41,7 +41,7 @@ matrix_grafana_content_security_policy: true
|
|
|
|
# added https: and http: url schemes (ignored by browsers supporting 'strict-dynamic') to be backward compatible with older browsers.
|
|
|
|
# added https: and http: url schemes (ignored by browsers supporting 'strict-dynamic') to be backward compatible with older browsers.
|
|
|
|
# [Content Security Policy Browser Test] (https://content-security-policy.com/browser-test/)
|
|
|
|
# [Content Security Policy Browser Test] (https://content-security-policy.com/browser-test/)
|
|
|
|
# [Content Security Policy Reference](https://content-security-policy.com/script-src/)
|
|
|
|
# [Content Security Policy Reference](https://content-security-policy.com/script-src/)
|
|
|
|
matrix_grafana_content_security_policy_customized: true
|
|
|
|
matrix_grafana_content_security_policy_customized: false
|
|
|
|
matrix_grafana_content_security_policy_template: "script-src 'self' 'unsafe-eval' 'unsafe-inline' http: https: 'strict-dynamic' $NONCE;object-src 'none';font-src 'self';style-src 'self' 'unsafe-inline' blob:;img-src * data:;base-uri 'self';connect-src 'self' grafana.com ws://$ROOT_PATH wss://$ROOT_PATH;manifest-src 'self';media-src 'none';form-action 'self';"
|
|
|
|
matrix_grafana_content_security_policy_template: "script-src 'self' 'unsafe-eval' 'unsafe-inline' http: https: 'strict-dynamic' $NONCE;object-src 'none';font-src 'self';style-src 'self' 'unsafe-inline' blob:;img-src * data:;base-uri 'self';connect-src 'self' grafana.com ws://$ROOT_PATH wss://$ROOT_PATH;manifest-src 'self';media-src 'none';form-action 'self';"
|
|
|
|
|
|
|
|
|
|
|
|
# A list of extra arguments to pass to the container
|
|
|
|
# A list of extra arguments to pass to the container
|
|
|
|