Also put csp meta tag in oauth views

2017-03-21 10:50:25 +01:00
parent d01929debc
commit fa5891b149
1 changed files with 1 additions and 0 deletions
--- a/src/oauth2views/header.ejs
+++ b/src/oauth2views/header.ejs
@@ -3,6 +3,7 @@
 <head>
    <meta charset="utf-8" />
    <meta name="viewport" content="user-scalable=no, initial-scale=1, maximum-scale=1, minimum-scale=1, width=device-width, height=device-height" />
+    <meta http-equiv="Content-Security-Policy" content="default-src 'unsafe-inline' 'unsafe-eval' 'self'; img-src 'self'" />

    <title> <%= title %> </title>