Handle manifest-src in CSP (#231)

2025-07-09 03:04:13 -04:00 · 2021-03-21 05:22:06 +05:30 · 2021-03-21 05:22:06 +05:30 · 337d0ebe37
commit 337d0ebe37
parent 2114cb87c0
1 changed files with 1 additions and 0 deletions
--- a/app/init.py
+++ b/app/init.py
@ -41,6 +41,7 @@ app.config['BANG_FILE'] = os.path.join(
    app.config['BANG_PATH'],
    'bangs.json')
 app.config['CSP'] = 'default-src \'none\';' \
+                    'manifest-src \'self\';' \
                    'img-src \'self\';' \
                    'style-src \'self\' \'unsafe-inline\';' \
                    'script-src \'self\';' \