csp: set form-action 'none'
Signed-off-by: strawberry <strawberry@puppygock.gay>
This commit is contained in:
@@ -21,8 +21,8 @@ use tracing::Level;
|
|||||||
|
|
||||||
use crate::{request, router};
|
use crate::{request, router};
|
||||||
|
|
||||||
const CONDUWUIT_CSP: &str =
|
const CONDUWUIT_CSP: &str = "sandbox; default-src 'none'; font-src 'none'; script-src 'none'; frame-ancestors 'none'; \
|
||||||
"sandbox; default-src 'none'; font-src 'none'; script-src 'none'; frame-ancestors 'none'; base-uri 'none';";
|
form-action 'none'; base-uri 'none';";
|
||||||
const CONDUWUIT_PERMISSIONS_POLICY: &str = "interest-cohort=(),browsing-topics=()";
|
const CONDUWUIT_PERMISSIONS_POLICY: &str = "interest-cohort=(),browsing-topics=()";
|
||||||
|
|
||||||
pub(crate) fn build(server: &Arc<Server>) -> io::Result<axum::routing::IntoMakeService<Router>> {
|
pub(crate) fn build(server: &Arc<Server>) -> io::Result<axum::routing::IntoMakeService<Router>> {
|
||||||
|
|||||||
Reference in New Issue
Block a user