From f3f857eabed89b2879781a5243b4613bc89fa037 Mon Sep 17 00:00:00 2001 From: Christoph Date: Tue, 5 Jan 2021 18:55:53 +0100 Subject: [PATCH] README.HTTP-Secure-Headers: change etherpad-lite url to 'epad-02.oopen.de'. --- README.HTTP-Secure-Headers | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.HTTP-Secure-Headers b/README.HTTP-Secure-Headers index 79b1f15..3457bd3 100644 --- a/README.HTTP-Secure-Headers +++ b/README.HTTP-Secure-Headers @@ -53,7 +53,7 @@ server { # Note! # Other directives (like worker-src, or child-src, or..) are falling back to 'default-src'. # - add_header Content-Security-Policy "default-src 'none'; script-src 'self' 'unsafe-inline' https://www.youtube.com ; img-src 'self' https://img.youtube.com ; style-src 'self' 'unsafe-inline' ; font-src 'self'; frame-src 'self' https://meet-ep-pee7eiji-xein9aiy.oopen.de https://www.youtube.com ; object-src 'none'; frame-ancestors 'none'; form-action 'self'; base-uri 'self'; connect-src 'self' https://storage.googleapis.com ; media-src 'self'"; + add_header Content-Security-Policy "default-src 'none'; script-src 'self' 'unsafe-inline' https://www.youtube.com ; img-src 'self' https://img.youtube.com ; style-src 'self' 'unsafe-inline' ; font-src 'self'; frame-src 'self' https://epad-01.oopen.de https://www.youtube.com ; object-src 'none'; frame-ancestors 'none'; form-action 'self'; base-uri 'self'; connect-src 'self' https://storage.googleapis.com ; media-src 'self'"; # Etwas allgemeiner dafür auch etws unsicherer formuliert: #