Enhance security by disallowing CSP object-src rule
This commit is contained in:
@@ -35,7 +35,6 @@
|
|||||||
worker-src 'self';
|
worker-src 'self';
|
||||||
frame-src * blob: data:;
|
frame-src * blob: data:;
|
||||||
form-action 'self';
|
form-action 'self';
|
||||||
object-src 'self';
|
|
||||||
manifest-src 'self';
|
manifest-src 'self';
|
||||||
">
|
">
|
||||||
<% for (var i=0; i < htmlWebpackPlugin.files.css.length; i++) {
|
<% for (var i=0; i < htmlWebpackPlugin.files.css.length; i++) {
|
||||||
|
|||||||
Reference in New Issue
Block a user