mirror of
https://github.com/philomena-dev/philomena.git
synced 2024-11-23 20:18:00 +01:00
Remove obsolete block-all-mixed-content
This was removed in all major browsers with no replacement. See https://www.w3.org/TR/mixed-content/#strict-checking for details on the obsolescence.
This commit is contained in:
parent
fb24d09760
commit
2e5b0678cd
1 changed files with 1 additions and 2 deletions
|
@ -34,8 +34,7 @@ defmodule PhilomenaWeb.ContentSecurityPolicyPlug do
|
|||
{:form_action, ["'self'"]},
|
||||
{:manifest_src, ["'self'"]},
|
||||
{:img_src, ["'self'", "blob:", "data:", cdn_uri, camo_uri]},
|
||||
{:media_src, ["'self'", "blob:", "data:", cdn_uri, camo_uri]},
|
||||
{:block_all_mixed_content, []}
|
||||
{:media_src, ["'self'", "blob:", "data:", cdn_uri, camo_uri]}
|
||||
]
|
||||
|
||||
csp_value =
|
||||
|
|
Loading…
Reference in a new issue