commit
This commit is contained in:
@@ -31,8 +31,8 @@ public class CspProcessor extends AbstractProcessor {
|
|||||||
"img-src 'self' data: https:; " +
|
"img-src 'self' data: https:; " +
|
||||||
"font-src * data:; " +
|
"font-src * data:; " +
|
||||||
"connect-src 'self' https:; " +
|
"connect-src 'self' https:; " +
|
||||||
"frame-ancestors 'none'; " +
|
"frame-ancestors 'self'; " +
|
||||||
"object-src 'none';";
|
"object-src 'self';";
|
||||||
|
|
||||||
ac.getResponse().setHeader("Content-Security-Policy", csp);
|
ac.getResponse().setHeader("Content-Security-Policy", csp);
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user