Miniflux needs form-action 'self'

Signed-off-by: Tommy <[email protected]>
TommyTran732 · Jun 30, 2024 · 5a3ac8c · 5a3ac8c
1 parent ab5fb14
commit 5a3ac8c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/etc/nginx/conf.d/sites_miniflux.conf b/etc/nginx/conf.d/sites_miniflux.conf
@@ -19,7 +19,7 @@ server {
     include snippets/proxy.conf;
 
     proxy_hide_header Content-Security-Policy;
-    add_header Content-Security-Policy "default-src 'none'; connect-src 'self'; frame-src *; img-src *; manifest-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; base-uri 'none'; block-all-mixed-content; form-action 'none'; frame-ancestors 'self'; upgrade-insecure-requests";
+    add_header Content-Security-Policy "default-src 'none'; connect-src 'self'; frame-src *; img-src *; manifest-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; base-uri 'none'; block-all-mixed-content; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests";
 
     location / {
         proxy_pass http://127.0.0.1:8080;