fork/cellxgene
1
0
Fork 0
mirror of https://github.com/chanzuckerberg/cellxgene.git synced 2026-10-08 02:38:11 +08:00
Code Issues Packages Projects Releases Wiki Activity

refinments to csp (#1422)

Browse Source
This commit is contained in:
Bruce Martin
2020-04-23 09:54:09 -07:00
committed by GitHub
parent a2047b90ae
commit 735eb11eb7
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/eb/app.py
+4 -1
View File
@@ -61,11 +61,14 @@ class WSGIServer(Server):
"img-src": ["'self'", "data:"], "img-src": ["'self'", "data:"],
"object-src": "'none'", "object-src": "'none'",
"base-uri": "'none'", "base-uri": "'none'",
"upgrade-insecure-requests": "",
"frame-ancestors": "'none'",
"require-trusted-types-for": "'script'",
} }
if len(style_hashes) > 0: if len(style_hashes) > 0:
csp["style-src"] = style_hashes csp["style-src"] = style_hashes
Talisman(app, force_https=app_config.server__force_https, content_security_policy=csp) Talisman(app, force_https=app_config.server__force_https, frame_options='DENY', content_security_policy=csp)
@staticmethod @staticmethod
def load_csp_hashes(app): def load_csp_hashes(app):