repos/website
1
Fork 0
Code Issues 1 Pull requests 23 Activity

Fix default CSP

Browse source
This commit is contained in:
Jake Howard 2022-10-31 09:57:49 +00:00
parent dd84f03bee
commit 5a8116ec22
Signed by: jake
GPG key ID: 57AFB45680EDD477
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
website/settings.py
View file

@ -412,6 +412,9 @@ PERMISSIONS_POLICY: dict[str, list] = {
"usb": [],
}
# Disable default CSP which blocks all remote content
CSP_DEFAULT_SRC = None
if not DEBUG:
SECURE_HSTS_SECONDS = 2592000 # 30 days