Skip to content

GitLab

Commit c0746460 authored by kaniini's avatar kaniini
Browse files

http security: remove form-action from CSP definitions

parent 4ad04325
Pipeline #4502 passed with stages
in 6 minutes and 35 seconds
Hide whitespace changes
Inline Side-by-side
lib/pleroma/plugs/http_security_plug.ex
View file @ c0746460
...@@ -32,7 +32,6 @@ defp csp_string do ...@@ -32,7 +32,6 @@ defp csp_string do
[ [
"default-src 'none'", "default-src 'none'",
"base-uri 'self'", "base-uri 'self'",
"form-action *",
"frame-ancestors 'none'", "frame-ancestors 'none'",
"img-src 'self' data: https:", "img-src 'self' data: https:",
"media-src 'self' https:", "media-src 'self' https:",
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment