mirror of
https://github.com/owncloud/ocis
synced 2026-04-25 17:25:21 +02:00
d4367fb224
Update acceptance tests and all deployment example CSP configs to include 'data:' in font-src, consistent with the default csp.yaml change. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
39 lines
825 B
YAML
39 lines
825 B
YAML
directives:
|
|
child-src:
|
|
- '''self'''
|
|
connect-src:
|
|
- '''self'''
|
|
- 'blob:'
|
|
- 'https://raw.githubusercontent.com/owncloud/awesome-ocis/'
|
|
# In contrary to bash and docker the default is given after the | character
|
|
- 'https://${KEYCLOAK_DOMAIN|keycloak.owncloud.test}/'
|
|
default-src:
|
|
- '''none'''
|
|
font-src:
|
|
- '''self'''
|
|
- 'data:'
|
|
frame-ancestors:
|
|
- '''none'''
|
|
frame-src:
|
|
- '''self'''
|
|
- 'blob:'
|
|
- 'https://embed.diagrams.net/'
|
|
img-src:
|
|
- '''self'''
|
|
- 'data:'
|
|
- 'blob:'
|
|
- 'https://raw.githubusercontent.com/owncloud/awesome-ocis/'
|
|
manifest-src:
|
|
- '''self'''
|
|
media-src:
|
|
- '''self'''
|
|
object-src:
|
|
- '''self'''
|
|
- 'blob:'
|
|
script-src:
|
|
- '''self'''
|
|
- '''unsafe-inline'''
|
|
style-src:
|
|
- '''self'''
|
|
- '''unsafe-inline'''
|