connect-src 'self' is unused

This commit is contained in:
Daniel Micay 2019-04-27 23:33:58 -04:00
parent c34afa4a3f
commit d30566d8f6

View File

@ -1,6 +1,6 @@
Options -indexes
Header always set Content-Security-Policy "default-src 'none'; connect-src 'self' https://seamlessupdate.app/; \
Header always set Content-Security-Policy "default-src 'none'; connect-src https://seamlessupdate.app/; \
font-src 'self'; img-src 'self'; manifest-src 'self'; script-src 'self'; style-src 'self'; \
form-action 'none'; frame-ancestors 'none'; block-all-mixed-content; base-uri 'none'; \
report-uri https://danielmicay.report-uri.com/r/d/csp/enforce"