Merge pull request #110 from Academic-Weapons/107-content-security-po…

…licy 107 content security policy
Academic-Weapons · Jun 10, 2023 · b9907c9 · b9907c9
2 parents b71b79f + d8efe52
commit b9907c9
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/...it/src/main/java/dk/itu/minitwit/security/ContentSecurityPolicySecurityConfiguration.java b/...it/src/main/java/dk/itu/minitwit/security/ContentSecurityPolicySecurityConfiguration.java
@@ -14,7 +14,7 @@ public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
         http.headers()
         .xssProtection()
         .and()
-        .contentSecurityPolicy("form-action 'self' always; default-src 'none'; script-src 'self'; style-src 'self'; font-src 'self'; connect-src 'self'; img-src 'self' *.gravatar.com; frame-src 'none'; frame-ancestors 'none'; media-src 'none'; object-src 'none'; manifest-src 'none'; worker-src 'none'; prefetch-src 'none';");// form-action 'none' always;");
+        .contentSecurityPolicy("form-action 'self' always; default-src 'none'; script-src 'self'; style-src 'self' *.academicweapons.dk/*; font-src 'self'; connect-src 'self'; img-src 'self' *.gravatar.com; frame-src 'none'; frame-ancestors 'none'; media-src 'none'; object-src 'none'; manifest-src 'none'; worker-src 'none';");
         return http.build();
     }