marcusconsulting/docker-skeleton
2
0
Fork 0
Code Activity

More permissive CSP header in nginx general configuration.

Browse Source
This commit is contained in:
Kovács Zoltán
2026-01-29 15:27:22 +01:00
parent d9a56d178b
commit 16ca4dc37c
2 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

BIN
.metadata
View File

Binary file not shown.

2
.templates/nginx/.nginx/_general.conf
View File

@@ -16,7 +16,7 @@ more_set_headers "X-Frame-Options: SAMEORIGIN";
more_set_headers "X-Content-Type-Options: nosniff";
more_set_headers "Referrer-Policy: no-referrer-when-downgrade";
# These are dummy restrictions (meaningless headers) below.
more_set_headers "Content-Security-Policy: img-src *";
more_set_headers "Content-Security-Policy: img-src * data: blob:; ";
more_set_headers "Permissions-Policy: geolocation=*";
# https://amalgjose.com/2020/05/15/how-to-set-the-allowed-url-length-for-a-nginx-request-error-code-414-uri-too-large/