Correct the syntax of the CSP
parent
aeb82923d5
commit
57bf25d39f
|
@ -55,7 +55,7 @@ function CSPHeaders($view, $nonce) {
|
||||||
// fall through
|
// fall through
|
||||||
default:
|
default:
|
||||||
// Enforce script-src on pages where inline scripts and event handlers have been fixed.
|
// Enforce script-src on pages where inline scripts and event handlers have been fixed.
|
||||||
header("Content-Security-Policy: script-src 'self' object-src 'self' 'nonce-$nonce' $additionalScriptSrc".
|
header("Content-Security-Policy: object-src 'self'; script-src 'self' 'nonce-$nonce' $additionalScriptSrc".
|
||||||
(ZM_CSP_REPORT_URI ? '; report-uri '.ZM_CSP_REPORT_URI : '' )
|
(ZM_CSP_REPORT_URI ? '; report-uri '.ZM_CSP_REPORT_URI : '' )
|
||||||
);
|
);
|
||||||
break;
|
break;
|
||||||
|
|
Loading…
Reference in New Issue