Add CSP header for dashboard

2018-04-10 17:16:48 +02:00
parent 97313fe1c8
commit 573d0e993e
1 changed files with 1 additions and 0 deletions
@@ -160,6 +160,7 @@ server {
        # }

        location / {
+            add_header Content-Security-Policy "default-src wss: https: *.cloudron.io <%= adminOrigin %>; script-src https: 'self' 'unsafe-inline' 'unsafe-eval'; img-src * data:; style-src https: 'unsafe-inline'";
            root   <%= sourceDir %>/dashboard/dist;
            index  index.html index.htm;
        }