github
/
portainer
mirror of https://github.com/portainer/portainer
1
0
Fork 0
Code Issues Releases Wiki Activity

fix(bouncer): add missing domain to CSP header BE-12067 (#917)

release/2.32.0-rc1
andres-portainer 2025-07-21 21:32:05 -03:00 committed by GitHub
parent d54ee1280f
commit bbd1c8c662
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
api/http/security/bouncer.go
View File

@ -534,7 +534,7 @@ func MWSecureHeaders(next http.Handler, hsts, csp bool) http.Handler {
}
if csp {
w.Header().Set("Content-Security-Policy", "script-src 'self' cdn.matomo.cloud; frame-ancestors 'none';")
w.Header().Set("Content-Security-Policy", "script-src 'self' cdn.matomo.cloud js.hsforms.net; frame-ancestors 'none';")
}
w.Header().Set("X-Content-Type-Options", "nosniff")