mirror of
https://github.com/element-hq/element-web
synced 2024-11-25 10:45:51 +03:00
Enhance security by disallowing CSP object-src rule
This commit is contained in:
parent
334ddd8cba
commit
33d05678b4
1 changed files with 0 additions and 1 deletions
|
@ -35,7 +35,6 @@
|
|||
worker-src 'self';
|
||||
frame-src * blob: data:;
|
||||
form-action 'self';
|
||||
object-src 'self';
|
||||
manifest-src 'self';
|
||||
">
|
||||
<% for (var i=0; i < htmlWebpackPlugin.files.css.length; i++) {
|
||||
|
|
Loading…
Reference in a new issue