Add manifest-src to allow manifest.json

2018-11-26 20:48:24 +01:00 · 2018-11-26 20:48:24 +01:00 · 591b11eafc
parent 39a3b1724a
commit 591b11eafc
1 changed files with 1 additions and 0 deletions
--- a/lib/pleroma/plugs/http_security_plug.ex
+++ b/lib/pleroma/plugs/http_security_plug.ex
@ -39,6 +39,7 @@ defp csp_string do
      "font-src 'self'",
      "script-src 'self'",
      "connect-src 'self' " <> String.replace(Pleroma.Web.Endpoint.static_url(), "http", "ws"),
+      "manifest-src 'self'",
      "upgrade-insecure-requests"
    ]
    |> Enum.join("; ")