disable scripts in the CSP
This commit is contained in:
parent
25d3e23a3f
commit
7a9c8db947
1 changed files with 6 additions and 2 deletions
|
@ -291,11 +291,15 @@ in {
|
||||||
header Via BunnyCDN
|
header Via BunnyCDN
|
||||||
}
|
}
|
||||||
route /media/* {
|
route /media/* {
|
||||||
reverse_proxy @isbunny http://127.0.0.1:4000
|
reverse_proxy @isbunny http://127.0.0.1:4000 {
|
||||||
|
header_down Content-Security-Policy "script-src 'none';"
|
||||||
|
}
|
||||||
respond "Use the cdn" 403
|
respond "Use the cdn" 403
|
||||||
}
|
}
|
||||||
route /proxy/* {
|
route /proxy/* {
|
||||||
reverse_proxy @isbunny http://127.0.0.1:4000
|
reverse_proxy @isbunny http://127.0.0.1:4000 {
|
||||||
|
header_down Content-Security-Policy "script-src 'none';"
|
||||||
|
}
|
||||||
respond "Use the cdn" 403
|
respond "Use the cdn" 403
|
||||||
}
|
}
|
||||||
handle {
|
handle {
|
||||||
|
|
Loading…
Reference in a new issue