RED-8128 change frame ancestors to self
This commit is contained in:
parent
34ca820f07
commit
4725f24406
@ -5,7 +5,7 @@ server {
|
|||||||
server_tokens off;
|
server_tokens off;
|
||||||
root /usr/share/nginx/html;
|
root /usr/share/nginx/html;
|
||||||
# SSL stuff for cloudflare proxy-ing - ignores SSL certificate and uses SNI
|
# SSL stuff for cloudflare proxy-ing - ignores SSL certificate and uses SNI
|
||||||
add_header Content-Security-Policy "frame-ancestors 'none'; connect-src 'self' $API_URL $PDFTRON_ALLOWED_HOSTS; default-src 'self' $API_URL; script-src 'self' blob: data: 'unsafe-eval' 'unsafe-inline'; script-src-elem 'self' data: blob: 'unsafe-inline'; script-src-attr 'self' data:; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self' data:";
|
add_header Content-Security-Policy "frame-ancestors 'self'; connect-src 'self' $API_URL $PDFTRON_ALLOWED_HOSTS; default-src 'self' $API_URL; script-src 'self' blob: data: 'unsafe-eval' 'unsafe-inline'; script-src-elem 'self' data: blob: 'unsafe-inline'; script-src-attr 'self' data:; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self' data:";
|
||||||
|
|
||||||
proxy_ssl_verify off;
|
proxy_ssl_verify off;
|
||||||
proxy_read_timeout 1m;
|
proxy_read_timeout 1m;
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user