[django] oprava CSP #82

rodlukas · Apr 13, 2020 · c3a8c6b · c3a8c6b
1 parent ddda2e6
commit c3a8c6b
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/up/settings/base.py b/up/settings/base.py
@@ -201,3 +201,4 @@
 CSP_FRAME_ANCESTORS = (CSP_NONE,)
 CSP_FORM_ACTION = (CSP_NONE,)
 CSP_BASE_URI = (CSP_NONE,)
+CSP_MANIFEST_SRC = (CSP_SELF,)  # site.webmanifest
diff --git a/up/settings/local.py b/up/settings/local.py
@@ -8,7 +8,7 @@
 ALLOWED_HOSTS = ["*"]
 
 # CSP
-CSPURL_LOCALHOST = ("*:3000",)
+CSPURL_LOCALHOST = ("http://*:3000",)
 
 CSP_STYLE_SRC = CSP_STYLE_SRC + CSPURL_LOCALHOST
 CSP_CONNECT_SRC = CSP_CONNECT_SRC + CSPURL_LOCALHOST + ("ws://*:3000",)