ProjectSegfault/invidious-experimenting
4
0
Fork 0
forked from midou/invidious
Code Pull Requests Activity

Fix quoting of 'none' in CSP header

Browse Source 
The keyword 'none' must be surrounded by single quotes.
Regression introduced by #2168.
This commit is contained in:
Samantaz Fox 2021-06-20 18:43:00 +02:00 committed by GitHub
parent e6bdcff0dd
commit 5a8825d016
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/invidious.cr
View File

@ -187,7 +187,7 @@ before_all do |env|
if env.request.resource.starts_with?("/embed") if env.request.resource.starts_with?("/embed")
frame_ancestors = "'self' http: https:" frame_ancestors = "'self' http: https:"
else else
frame_ancestors = "none" frame_ancestors = "'none'"
end end
# TODO: Remove style-src's 'unsafe-inline', requires to remove all # TODO: Remove style-src's 'unsafe-inline', requires to remove all