feat: add stricter CSPs
This commit is contained in:
parent
3555f055cf
commit
e0a4b2363f
@ -5,6 +5,10 @@
|
|||||||
<link rel="stylesheet" href="/static/globals.css" />
|
<link rel="stylesheet" href="/static/globals.css" />
|
||||||
<link rel="stylesheet" href="/static/home.css" />
|
<link rel="stylesheet" href="/static/home.css" />
|
||||||
<meta name="viewport" content="width=device-width, initial-scale=1" />
|
<meta name="viewport" content="width=device-width, initial-scale=1" />
|
||||||
|
<meta
|
||||||
|
http-equiv="Content-Security-Policy"
|
||||||
|
content="default-src 'none'; style-src 'self'; script-src 'none';"
|
||||||
|
/>
|
||||||
</head>
|
</head>
|
||||||
<body>
|
<body>
|
||||||
<div class="container">
|
<div class="container">
|
||||||
@ -17,9 +21,9 @@
|
|||||||
StackOverflow.
|
StackOverflow.
|
||||||
</p>
|
</p>
|
||||||
{{ if .errorMessage }}
|
{{ if .errorMessage }}
|
||||||
<div class="error">
|
<div class="error">
|
||||||
<p><b>Error</b>: {{ .errorMessage }}</p>
|
<p><b>Error</b>: {{ .errorMessage }}</p>
|
||||||
</div>
|
</div>
|
||||||
{{ end }}
|
{{ end }}
|
||||||
<form method="POST">
|
<form method="POST">
|
||||||
<div class="view-form">
|
<div class="view-form">
|
||||||
|
@ -7,7 +7,7 @@
|
|||||||
<meta name="viewport" content="width=device-width, initial-scale=1" />
|
<meta name="viewport" content="width=device-width, initial-scale=1" />
|
||||||
<meta
|
<meta
|
||||||
http-equiv="Content-Security-Policy"
|
http-equiv="Content-Security-Policy"
|
||||||
content="default-src 'self'; style-src 'self'; script-src 'none'; img-src https:;"
|
content="default-src 'none'; style-src 'self'; script-src 'none'; img-src https:;"
|
||||||
/>
|
/>
|
||||||
</head>
|
</head>
|
||||||
<body>
|
<body>
|
||||||
|
Loading…
x
Reference in New Issue
Block a user