From d30566d8f6597fad50c950fdc7bee1f809445512 Mon Sep 17 00:00:00 2001 From: Daniel Micay Date: Sat, 27 Apr 2019 23:33:58 -0400 Subject: [PATCH] connect-src 'self' is unused --- static/.htaccess | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/static/.htaccess b/static/.htaccess index 94e5e482..bafe49ee 100644 --- a/static/.htaccess +++ b/static/.htaccess @@ -1,6 +1,6 @@ Options -indexes -Header always set Content-Security-Policy "default-src 'none'; connect-src 'self' https://seamlessupdate.app/; \ +Header always set Content-Security-Policy "default-src 'none'; connect-src https://seamlessupdate.app/; \ font-src 'self'; img-src 'self'; manifest-src 'self'; script-src 'self'; style-src 'self'; \ form-action 'none'; frame-ancestors 'none'; block-all-mixed-content; base-uri 'none'; \ report-uri https://danielmicay.report-uri.com/r/d/csp/enforce"