vbatts/microblog.pub
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

csp: load pure.css

Browse source
This commit is contained in:
hiromi-mi 2020-07-05 19:48:30 +09:00
parent 54fa114e69
commit ea3f62b4f6
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
app.py
View file

@ -101,7 +101,7 @@ csrf.init_app(app)
csp = {
"default-src": "'self'",
"script-src": "'self'", # to use nonce
"style-src": "'unsafe-inline'", # for old browsers without support style-src-attr
"style-src": ["'self'", "'unsafe-inline'"],
"base-uri": "'none'",
"object-src" : "'none'",
}