Docker/portainer
Docker/portainer
1
0
Fork 0
mirror of https://github.com/portainer/portainer.git synced 2025-07-25 08:19:40 +02:00
Code Issues Releases Activity

fix(bouncer): add missing domain to CSP header BE-12067 (#916)

Browse source
This commit is contained in:
andres-portainer 2025-07-21 21:32:50 -03:00 • committed by GitHub
parent 937456596a
commit a4cff13531
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
api/http/security/bouncer.go
View file

@ -534,7 +534,7 @@ func MWSecureHeaders(next http.Handler, hsts, csp bool) http.Handler {
}
if csp {
w.Header().Set("Content-Security-Policy", "script-src 'self' cdn.matomo.cloud; frame-ancestors 'none';")
w.Header().Set("Content-Security-Policy", "script-src 'self' cdn.matomo.cloud js.hsforms.net; frame-ancestors 'none';")
}
w.Header().Set("X-Content-Type-Options", "nosniff")