deepState/tabi-lean
3
0
Fork 0
forked from deepStateMirrors/tabi
Code Issues 1 Pull requests Activity

🔒️ fix: prevent malformed CSP header

Browse source
This commit is contained in:
welpo 2023-02-23 01:35:06 +01:00
parent 5dcd605801
commit 54ae781352
No known key found for this signature in database
GPG key ID: A2F978CF4EC1F5A6
1 changed files with 7 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

10
templates/partials/header.html
View file

@ -45,10 +45,14 @@
<meta http-equiv="Content-Security-Policy" <meta http-equiv="Content-Security-Policy"
content="default-src 'self' content="default-src 'self'
{% if config.extra.allowed_domains %} {%- if config.extra.allowed_domains -%}
;
{%- for domain in config.extra.allowed_domains -%} {%- for domain in config.extra.allowed_domains -%}
{{ domain.directive }} {{ domain.domains | join(sep=' ') }}; {{ domain.directive }} {{ domain.domains | join(sep=' ') }}
{%- if not loop.last -%}
;
{%- endif -%}
{%- endfor -%} {%- endfor -%}
{% endif %}"> {%- endif -%}">
</head> </head>