lucaspalomodevelop/core
1
0
Fork 0
mirror of https://github.com/lucaspalomodevelop/core.git synced 2026-03-19 19:15:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

remove Content-Security-Policy "default-src 'self'; see https://github.com/opnsense/core/pull/2212

Browse Source
This commit is contained in:
Ad Schellevis 2018-04-19 12:57:38 +02:00
parent 7eb6157b9c
commit c9132db422
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/opnsense/mvc/app/controllers/OPNsense/Base/ControllerBase.php
View File

@ -207,7 +207,7 @@ class ControllerBase extends ControllerRoot
// append ACL object to view
$this->view->acl = new \OPNsense\Core\ACL();
$this->response->setHeader('Content-Security-Policy', "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' 'unsafe-eval';");
$this->response->setHeader('Content-Security-Policy', "script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' 'unsafe-eval';");
$this->response->setHeader('X-Frame-Options', "SAMEORIGIN");
$this->response->setHeader('X-Content-Type-Options', "nosniff");
$this->response->setHeader('X-XSS-Protection', "1; mode=block");