aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorshibayashi <shibayashi@cypherpunk.observer>2018-11-26 20:48:24 +0100
committershibayashi <shibayashi@cypherpunk.observer>2018-11-26 20:48:24 +0100
commit591b11eafcc49a7812390a03d29596b4a96ad5f8 (patch)
tree83b89af74c122e4cc68cd65dcf376fe7d0f75758
parent39a3b1724ad5bf5828142d4e83d7cb2bbb45a0d9 (diff)
downloadpleroma-591b11eafcc49a7812390a03d29596b4a96ad5f8.tar.gz
Add manifest-src to allow manifest.json
-rw-r--r--lib/pleroma/plugs/http_security_plug.ex1
1 files changed, 1 insertions, 0 deletions
diff --git a/lib/pleroma/plugs/http_security_plug.ex b/lib/pleroma/plugs/http_security_plug.ex
index 31c7332f8..84d6506e3 100644
--- a/lib/pleroma/plugs/http_security_plug.ex
+++ b/lib/pleroma/plugs/http_security_plug.ex
@@ -39,6 +39,7 @@ defmodule Pleroma.Plugs.HTTPSecurityPlug do
"font-src 'self'",
"script-src 'self'",
"connect-src 'self' " <> String.replace(Pleroma.Web.Endpoint.static_url(), "http", "ws"),
+ "manifest-src 'self'",
"upgrade-insecure-requests"
]
|> Enum.join("; ")