From baa76991f0bf1f02aacc585ef71d3f273d02ad12 Mon Sep 17 00:00:00 2001 From: MattIPv4 Date: Mon, 18 Apr 2022 12:48:07 +0100 Subject: [PATCH] Allow websockets in default CSP --- src/nginxconfig/templates/global_sections/security.vue | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/nginxconfig/templates/global_sections/security.vue b/src/nginxconfig/templates/global_sections/security.vue index ee1df79..694b222 100644 --- a/src/nginxconfig/templates/global_sections/security.vue +++ b/src/nginxconfig/templates/global_sections/security.vue @@ -180,7 +180,7 @@ THE SOFTWARE. enabled: true, }, contentSecurityPolicy: { - default: 'default-src \'self\' http: https: data: blob: \'unsafe-inline\'; frame-ancestors \'self\';', + default: 'default-src \'self\' http: https: ws: wss: data: blob: \'unsafe-inline\'; frame-ancestors \'self\';', enabled: true, }, permissionsPolicy: {