moon
/
bloat
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Remove form-action CSP directive 

Chrome incorrectly restricts the redirect URL to the sources specified
in the form-action value, which prevents the instance oauth page from
loading.
This commit is contained in:
r 2023-10-25 06:40:34 +00:00
parent 597cfc6b1e
commit f4881e7267
1 changed files with 0 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
service/transport.go
View File

@ -32,7 +32,6 @@ const csp = "default-src 'none';" +
" font-src *;" + " font-src *;" +
" child-src *;" + " child-src *;" +
" connect-src 'self';" + " connect-src 'self';" +
" form-action 'self';" +
" script-src 'self';" + " script-src 'self';" +
" style-src 'self'" " style-src 'self'"