Add CSP for /stats

thom · thom · commit 61eac82c2b57 · 2020-07-25T19:42:28.000+02:00
diff --git a/server/conf/nginx_vhost.conf.master b/server/conf/nginx_vhost.conf.master
@@ -168,6 +168,7 @@ server {
             index index.html index.php;
             auth_basic "Members Only";
             auth_basic_user_file <tmpl_var name='stats_auth_passwd_file'>;
+            add_header Content-Security-Policy "default-src * 'self' 'unsafe-inline';";
         }
 
         location ^~ /awstats-icon {

Original file line number	Diff line number	Diff line change
`@@ -168,6 +168,7 @@ server {`
`168`	`168`	`index index.html index.php;`
`169`	`169`	`auth_basic "Members Only";`
`170`	`170`	`auth_basic_user_file <tmpl_var name='stats_auth_passwd_file'>;`
	`171`	`+ add_header Content-Security-Policy "default-src * 'self' 'unsafe-inline';";`
`171`	`172`	`}`
`172`	`173`
`173`	`174`	`location ^~ /awstats-icon {`