forked from midou/invidious
Fix quoting of 'none' in CSP header
The keyword 'none' must be surrounded by single quotes. Regression introduced by #2168.
This commit is contained in:
parent
e6bdcff0dd
commit
5a8825d016
@ -187,7 +187,7 @@ before_all do |env|
|
||||
if env.request.resource.starts_with?("/embed")
|
||||
frame_ancestors = "'self' http: https:"
|
||||
else
|
||||
frame_ancestors = "none"
|
||||
frame_ancestors = "'none'"
|
||||
end
|
||||
|
||||
# TODO: Remove style-src's 'unsafe-inline', requires to remove all
|
||||
|
Loading…
Reference in New Issue
Block a user