vbatts/microblog.pub
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

csp: do not use java applet, <base>

Browse source
This commit is contained in:
hiromi-mi 2020-06-20 10:19:54 +09:00
parent f0929c6bab
commit 10d77cf183
1 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
app.py
View file

@ -104,6 +104,8 @@ csp = {
"script-src": "'self'", # to use nonce
"style-src": "'unsafe-inline'", # for old browsers without support style-src-attr
"style-src-elem": "'self'",
"base-uri": "'none'",
"object-src" : "'none'",
}
talisman = Talisman(