nrd.li/akkoma
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Merge branch 'bugfix/csp-remove-form-action' into 'develop'

Browse source 
http security: remove form-action from CSP definitions

Closes #379

See merge request pleroma/pleroma!456
This commit is contained in:
kaniini 2018-11-16 17:47:22 +00:00
parent 4ad0432565 c07464607d
commit 38f76d964f
1 changed files with 0 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
lib/pleroma/plugs/http_security_plug.ex
View file

@ -32,7 +32,6 @@ defp csp_string do
[
"default-src 'none'",
"base-uri 'self'",
"form-action *",
"frame-ancestors 'none'",
"img-src 'self' data: https:",
"media-src 'self' https:",