blitzwing/cryptpad
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

remove wss from connecSrc in example nginx config

Browse source
This commit is contained in:
ansuz 2020-01-06 15:22:55 -05:00
parent f590f60dcb
commit 1b3c2a43bf
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
docs/example.nginx.conf
View file

@ -72,7 +72,7 @@ server {
set $styleSrc "'unsafe-inline' 'self' ${main_domain}";
# connect-src restricts URLs which can be loaded using script interfaces
set $connectSrc "'self' https://${main_domain} wss://${main_domain} $main_domain https://${api_domain} blob:";
set $connectSrc "'self' https://${main_domain} $main_domain https://${api_domain} blob:";
# fonts can be loaded from data-URLs or the main domain
set $fontSrc "'self' data: ${main_domain}";