This commit is contained in:
@jyuhsin
2025-12-19 14:10:53 +08:00
parent 28151ef477
commit c943a1a82e
@@ -31,8 +31,8 @@ public class CspProcessor extends AbstractProcessor {
"img-src 'self' data: https:; " +
"font-src * data:; " +
"connect-src 'self' https:; " +
"frame-ancestors 'none'; " +
"object-src 'none';";
"frame-ancestors 'self'; " +
"object-src 'self';";
ac.getResponse().setHeader("Content-Security-Policy", csp);