|
|
|
@ -36,11 +36,11 @@ server {
|
|
|
|
|
|
|
|
|
|
set $styleSrc "'unsafe-inline' 'self' your-main-domain.com";
|
|
|
|
|
set $scriptSrc "'self' your-main-domain.com";
|
|
|
|
|
set $connectSrc "'self' https://your-main-domain.com wss://your-main-domain.com https://api.your-main-domain.com wss://your-main-domain.com your-main-domain.com blob: your-main-domain.com";
|
|
|
|
|
set $connectSrc "'self' https://your-main-domain.com wss://your-main-domain.com your-main-domain.com https://api.your-main-domain.com blob: your-main-domain.com";
|
|
|
|
|
set $fontSrc "'self' data: your-main-domain.com";
|
|
|
|
|
set $imgSrc "data: * blob:";
|
|
|
|
|
set $frameSrc "'self' your-sandbox-domain.com blob:";
|
|
|
|
|
set $mediaSrc "* blob:";
|
|
|
|
|
set $imgSrc "'self' data: * blob: your-main-domain.com";
|
|
|
|
|
set $frameSrc "'self' your-sandbox-domain.com blob: your-sandbox-domain.com";
|
|
|
|
|
set $mediaSrc "'self' data: * blob: your-main-domain.com";
|
|
|
|
|
set $childSrc "https://your-main-domain.com";
|
|
|
|
|
set $workerSrc "https://your-main-domain.com";
|
|
|
|
|
|
|
|
|
|