From 3f9ae30b52875a6c8f5244b03f9d77c632e2b52a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Adrian=20N=C3=B6thlich?= Date: Mon, 7 Jan 2019 15:12:46 +0100 Subject: [PATCH] Made CSP syntax in nginx example conf valid Made CSP syntax valid. There were arguments for e.g. blob: oder data: missing --- docs/example.nginx.conf | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/docs/example.nginx.conf b/docs/example.nginx.conf index e8454dc31..5c4ff2fbe 100644 --- a/docs/example.nginx.conf +++ b/docs/example.nginx.conf @@ -34,15 +34,15 @@ server { # Will not set any header if it is emptystring add_header Cache-Control $cacheControl; - set $styleSrc "'unsafe-inline' 'self' your-main-domain.com"; - set $scriptSrc "'self' your-main-domain.com"; - set $connectSrc "'self' https://your-main-domain.com wss://your-main-domain.com https://api.your-main-domain.com wss://your-main-domain.com your-main-domain.com blob: your-main-domain.com"; - set $fontSrc "'self' data: your-main-domain.com"; - set $imgSrc "data: * blob:"; - set $frameSrc "'self' your-sandbox-domain.com blob:"; - set $mediaSrc "* blob:"; - set $childSrc "https://your-main-domain.com"; - set $workerSrc "https://your-main-domain.com"; + set $styleSrc "'unsafe-inline' 'self' your-main-domain.com"; + set $scriptSrc "'self' your-main-domain.com"; + set $connectSrc "'self' https://your-main-domain.com wss://your-main-domain.com your-main-domain.com https://api.your-main-domain.com blob: your-main-domain.com"; + set $fontSrc "'self' data: your-main-domain.com"; + set $imgSrc "'self' data: * blob: your-main-domain.com"; + set $frameSrc "'self' your-sandbox-domain.com blob: your-sandbox-domain.com"; + set $mediaSrc "'self' data: * blob: your-main-domain.com"; + set $childSrc "https://your-main-domain.com"; + set $workerSrc "https://your-main-domain.com"; set $unsafe 0; if ($uri = "/pad/inner.html") { set $unsafe 1; }