mirror of
https://github.com/usebruno/bruno.git
synced 2026-06-26 22:25:40 +00:00
Strengthen CSP
This commit is contained in:
@@ -30,8 +30,7 @@ const lastOpenedCollections = new LastOpenedCollections();
|
||||
// Reference: https://content-security-policy.com/
|
||||
const contentSecurityPolicy = [
|
||||
"default-src 'self'",
|
||||
"script-src * 'unsafe-inline' 'unsafe-eval'",
|
||||
"connect-src * 'unsafe-inline'",
|
||||
"connect-src 'self' https://*.posthog.com",
|
||||
"font-src 'self' https:",
|
||||
"frame-src data:",
|
||||
// this has been commented out to make oauth2 work
|
||||
|
||||
Reference in New Issue
Block a user