Correct the syntax of the CSP

2023-02-23 09:47:49 -05:00 · 2023-02-23 09:47:49 -05:00 · 57bf25d39f
parent aeb82923d5
commit 57bf25d39f
1 changed files with 1 additions and 1 deletions
--- a/web/includes/functions.php
+++ b/web/includes/functions.php
@ -55,7 +55,7 @@ function CSPHeaders($view, $nonce) {
      // fall through
    default:
      // Enforce script-src on pages where inline scripts and event handlers have been fixed.
-      header("Content-Security-Policy: script-src 'self' object-src 'self' 'nonce-$nonce' $additionalScriptSrc".
+      header("Content-Security-Policy: object-src 'self'; script-src 'self' 'nonce-$nonce' $additionalScriptSrc".
        (ZM_CSP_REPORT_URI ? '; report-uri '.ZM_CSP_REPORT_URI : '' )
      );
      break;