commit
This commit is contained in:
@@ -31,8 +31,8 @@ public class CspProcessor extends AbstractProcessor {
|
||||
"img-src 'self' data: https:; " +
|
||||
"font-src * data:; " +
|
||||
"connect-src 'self' https:; " +
|
||||
"frame-ancestors 'none'; " +
|
||||
"object-src 'none';";
|
||||
"frame-ancestors 'self'; " +
|
||||
"object-src 'self';";
|
||||
|
||||
ac.getResponse().setHeader("Content-Security-Policy", csp);
|
||||
|
||||
|
||||
Reference in New Issue
Block a user