stationgroup/ansible-privatebin
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

fix for quoted cspheader

Browse source
This commit is contained in:
Bryan Black 2020-08-25 18:42:47 -07:00 committed by GitHub
parent 8f737432d8
commit db98ff9cc3
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
templates/conf.php.j2
View file

@ -101,7 +101,7 @@ icon = {{ private_bin_main_icon }}
; webassembly support (used for zlib compression). You can remove it if Chrome ; webassembly support (used for zlib compression). You can remove it if Chrome
; doesn't need to be supported and old browsers don't need to be warned. ; doesn't need to be supported and old browsers don't need to be warned.
{% if private_bin_main_url_shortener is not none %} {% if private_bin_main_url_shortener is not none %}
cspheader = {{ private_bin_main_cspheader }} cspheader = "{{ private_bin_main_cspheader }}"
{% else %} {% else %}
; cspheader = "default-src 'none'; manifest-src 'self'; connect-src * blob:; script-src 'self' 'unsafe-eval'; style-src 'self'; font-src 'self'; img-src 'self' data: blob:; media-src blob:; object-src blob:; sandbox allow-same-origin allow-scripts allow-forms allow-popups allow-modals" ; cspheader = "default-src 'none'; manifest-src 'self'; connect-src * blob:; script-src 'self' 'unsafe-eval'; style-src 'self'; font-src 'self'; img-src 'self' data: blob:; media-src blob:; object-src blob:; sandbox allow-same-origin allow-scripts allow-forms allow-popups allow-modals"
{% endif %} {% endif %}