diff options
| author | Henry Jameson <me@hjkos.com> | 2023-05-07 15:29:19 +0300 |
|---|---|---|
| committer | Henry Jameson <me@hjkos.com> | 2023-05-07 15:29:19 +0300 |
| commit | f50fd9278fd36e6bd3ae36bb7f5033d9fd8a84ac (patch) | |
| tree | 3ecb96426e351cfcbe06cde4ceaf2c50cd98cb1e | |
| parent | f8ef4924ecab5ba6851eee82845624bc15f868de (diff) | |
| download | pleroma-f50fd9278fd36e6bd3ae36bb7f5033d9fd8a84ac.tar.gz pleroma-f50fd9278fd36e6bd3ae36bb7f5033d9fd8a84ac.zip | |
reduce redundant reduntancy reduction
| -rw-r--r-- | lib/pleroma/web/plugs/http_security_plug.ex | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/lib/pleroma/web/plugs/http_security_plug.ex b/lib/pleroma/web/plugs/http_security_plug.ex index a3166bc96..b189d5bfd 100644 --- a/lib/pleroma/web/plugs/http_security_plug.ex +++ b/lib/pleroma/web/plugs/http_security_plug.ex @@ -93,7 +93,7 @@ defmodule Pleroma.Web.Plugs.HTTPSecurityPlug do img_src = "img-src 'self' data: blob:" media_src = "media-src 'self'" - connect_src = ["connect-src 'self' blob: ", static_url, ?\s, websocket_url] + connect_src = "connect-src 'self' blob:" # Strict multimedia CSP enforcement only when MediaProxy is enabled {img_src, media_src, connect_src} = @@ -103,7 +103,7 @@ defmodule Pleroma.Web.Plugs.HTTPSecurityPlug do { [img_src, sources], [media_src, sources], - [connect_src, sources] + [connect_src, sources, ?\s, websocket_url] } else { |