1
0
mirror of https://github.com/bitwarden/server.git synced 2024-11-24 12:35:25 +01:00

no longer need hibp in connect csp

This commit is contained in:
Kyle Spearrin 2019-01-18 22:04:10 -05:00
parent 858a0d28dd
commit 1a932de925

View File

@ -10,7 +10,7 @@ namespace Bit.Setup
"default-src 'self'; style-src 'self' 'unsafe-inline'; " + "default-src 'self'; style-src 'self' 'unsafe-inline'; " +
"img-src 'self' data: https://haveibeenpwned.com https://www.gravatar.com; " + "img-src 'self' data: https://haveibeenpwned.com https://www.gravatar.com; " +
"child-src 'self' https://*.duosecurity.com; frame-src 'self' https://*.duosecurity.com; " + "child-src 'self' https://*.duosecurity.com; frame-src 'self' https://*.duosecurity.com; " +
"connect-src 'self' wss://{0} https://haveibeenpwned.com https://api.pwnedpasswords.com " + "connect-src 'self' wss://{0} https://api.pwnedpasswords.com " +
"https://twofactorauth.org; " + "https://twofactorauth.org; " +
"object-src 'self' blob:;"; "object-src 'self' blob:;";