1
0
mirror of https://github.com/vrana/adminer.git synced 2025-08-10 00:28:34 +02:00

CSP: Allow any CSS

This commit is contained in:
Jakub Vrana
2018-01-22 12:22:25 +01:00
parent 9a4cd8936d
commit 48ed20323f
2 changed files with 1 additions and 2 deletions

View File

@@ -110,7 +110,6 @@ function csp() {
return array(
array(
"script-src" => "'self' 'unsafe-inline' 'nonce-" . get_nonce() . "' 'strict-dynamic'", // 'self' is a fallback for browsers not supporting 'strict-dynamic', 'unsafe-inline' is a fallback for browsers not supporting 'nonce-'
"style-src" => "'self' 'unsafe-inline'",
"connect-src" => "'self'",
"frame-src" => "https://www.adminer.org",
"object-src" => "'none'",