Dev qing #12

Merged
qing merged 28 commits from dev_qing into main 2026-07-28 12:46:27 +08:00
5 changed files with 5 additions and 5 deletions
Showing only changes of commit a5e581ef24 - Show all commits

No files matched your search

+1 -1
View File
@@ -30,7 +30,7 @@ def apply_security_headers(app, csp_policy=None):
"default-src 'self'; "
"script-src 'self' 'unsafe-inline'; "
"style-src 'self' 'unsafe-inline'; "
"img-src 'self' data:; "
"img-src 'self' data: blob:; "
"font-src 'self'; "
"connect-src 'self'; "
"frame-ancestors 'none'"
+1 -1
View File
@@ -30,7 +30,7 @@ def apply_security_headers(app, csp_policy=None):
"default-src 'self'; "
"script-src 'self' 'unsafe-inline'; "
"style-src 'self' 'unsafe-inline'; "
"img-src 'self' data:; "
"img-src 'self' data: blob:; "
"font-src 'self'; "
"connect-src 'self'; "
"frame-ancestors 'none'"
+1 -1
View File
@@ -30,7 +30,7 @@ def apply_security_headers(app, csp_policy=None):
"default-src 'self'; "
"script-src 'self' 'unsafe-inline'; "
"style-src 'self' 'unsafe-inline'; "
"img-src 'self' data:; "
"img-src 'self' data: blob:; "
"font-src 'self'; "
"connect-src 'self'; "
"frame-ancestors 'none'"
+1 -1
View File
@@ -30,7 +30,7 @@ def apply_security_headers(app, csp_policy=None):
"default-src 'self'; "
"script-src 'self' 'unsafe-inline'; "
"style-src 'self' 'unsafe-inline'; "
"img-src 'self' data:; "
"img-src 'self' data: blob:; "
"font-src 'self'; "
"connect-src 'self'; "
"frame-ancestors 'none'"
+1 -1
View File
@@ -72,7 +72,7 @@ func setSecurityHeaders(h http.Header) {
h.Set("Strict-Transport-Security", "max-age=15552000")
h.Set("Content-Security-Policy",
"default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; "+
"img-src 'self' data:; font-src 'self'; connect-src 'self'; frame-ancestors 'none'")
"img-src 'self' data: blob:; font-src 'self'; connect-src 'self'; frame-ancestors 'none'")
}
// ServeHTTP 实现 http.Handler。