Skip to content
Snippets Groups Projects
Commit a7dd73a9 authored by Chris Hines's avatar Chris Hines
Browse files

include unsafe-inline so things load

parent 0e2015aa
No related branches found
No related tags found
3 merge requests!107Test,!106if stat fails, display the error instead of immediately refreshing...,!105Dev
Pipeline #29009 passed
...@@ -2,7 +2,7 @@ location ~ /.* { ...@@ -2,7 +2,7 @@ location ~ /.* {
root /opt/strudel2/spa/mlerp/; root /opt/strudel2/spa/mlerp/;
#alias /var/www/mlerp/dist/mlerp/; #alias /var/www/mlerp/dist/mlerp/;
try_files $uri$args $uri$args/ $uri/ /index.html; try_files $uri$args $uri$args/ $uri/ /index.html;
add_header Content-Security-Policy "default-src 'self' *.mlerp.cloud.edu.au mlerp.cloud.edu.au; style-src 'self' fonts.googleapis.com 'unsafe-inline'; font-src 'self' fonts.gstatic.com"; add_header Content-Security-Policy "default-src 'self' *.mlerp.cloud.edu.au 'unsafe-inline'; style-src 'self' fonts.googleapis.com 'unsafe-inline'; font-src 'self' fonts.gstatic.com";
add_header Strict-Transport-Security "max-age=15768000; includeSubDomains" always; add_header Strict-Transport-Security "max-age=15768000; includeSubDomains" always;
add_header X-Frame-Options "SAMEORIGIN"; add_header X-Frame-Options "SAMEORIGIN";
add_header X-XSS-Protection "1; mode=block"; add_header X-XSS-Protection "1; mode=block";
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment