|
|
@ -35,6 +35,8 @@ module.exports = {
|
|
|
|
* domain which will serve your CryptPad instance.
|
|
|
|
* domain which will serve your CryptPad instance.
|
|
|
|
*/
|
|
|
|
*/
|
|
|
|
"child-src blob: *",
|
|
|
|
"child-src blob: *",
|
|
|
|
|
|
|
|
// IE/Edge
|
|
|
|
|
|
|
|
"frame-src blob: *",
|
|
|
|
|
|
|
|
|
|
|
|
"media-src * blob:",
|
|
|
|
"media-src * blob:",
|
|
|
|
|
|
|
|
|
|
|
@ -63,6 +65,8 @@ module.exports = {
|
|
|
|
* configured for best effect.
|
|
|
|
* configured for best effect.
|
|
|
|
*/
|
|
|
|
*/
|
|
|
|
"child-src *",
|
|
|
|
"child-src *",
|
|
|
|
|
|
|
|
// IE/Edge
|
|
|
|
|
|
|
|
"frame-src *",
|
|
|
|
|
|
|
|
|
|
|
|
// see the comment above in the 'contentSecurity' section
|
|
|
|
// see the comment above in the 'contentSecurity' section
|
|
|
|
"connect-src 'self' ws: wss:" + domain,
|
|
|
|
"connect-src 'self' ws: wss:" + domain,
|
|
|
|