We now set the csp headers from nginx

This makes it easier to also support local development on non https
2018-04-10 17:59:41 +02:00
parent 5cc298555a
commit b0b19053a7
6 changed files with 0 additions and 6 deletions
@@ -3,7 +3,6 @@
 <head>
    <meta charset="utf-8" />
    <meta name="viewport" content="user-scalable=no, initial-scale=1, maximum-scale=1, minimum-scale=1, width=device-width, height=device-height" />
-    <!-- <meta http-equiv="Content-Security-Policy" content="default-src 'unsafe-inline' 'unsafe-eval' 'self' *.cloudron.io <%= apiOriginHostname %>; img-src * data:;" /> -->

    <!-- this gets changed once we get the config (because angular has not loaded yet, we see template string for a flash) -->
    <title> Cloudron </title>