forked from I2P_Developers/i2p.i2p
zzz
fa9f60bcd9
i2ptunnel, susidns: Add headers.jsi Console: Remove onload and use nonce for inline scripts where able Version remaining js links
5 lines
309 B
Plaintext
5 lines
309 B
Plaintext
<%
|
|
// Add this AFTER css.jsi if there's any onclick attributes in the page
|
|
response.setHeader("Content-Security-Policy", "default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; form-action 'self'; frame-ancestors 'self'; object-src 'none'; media-src 'none'");
|
|
%>
|