Курнат Андрей
45 lines
1.2 KiB
YAML
45 lines
1.2 KiB
YAML
directives:
|
|
child-src:
|
|
- '''self'''
|
|
connect-src:
|
|
- '''self'''
|
|
- 'blob:'
|
|
- 'https://${COMPANION_DOMAIN|companion.qsfera.test}/'
|
|
- 'wss://${COMPANION_DOMAIN|companion.qsfera.test}/'
|
|
- 'https://raw.githubusercontent.com/qsfera-eu/awesome-apps/'
|
|
- 'https://${KEYCLOAK_DOMAIN|keycloak.qsfera.test}/'
|
|
default-src:
|
|
- '''none'''
|
|
font-src:
|
|
- '''self'''
|
|
frame-ancestors:
|
|
- '''self'''
|
|
frame-src:
|
|
- '''self'''
|
|
- 'blob:'
|
|
- 'https://embed.diagrams.net/'
|
|
# In contrary to bash and docker the default is given after the | character
|
|
- 'https://${COLLABORA_DOMAIN|collabora.qsfera.test}/'
|
|
# This is needed for the external-sites web extension when embedding sites
|
|
- 'https://docs.qsfera.eu'
|
|
img-src:
|
|
- '''self'''
|
|
- 'data:'
|
|
- 'blob:'
|
|
- 'https://raw.githubusercontent.com/qsfera-eu/awesome-apps/'
|
|
# In contrary to bash and docker the default is given after the | character
|
|
- 'https://${COLLABORA_DOMAIN|collabora.qsfera.test}/'
|
|
manifest-src:
|
|
- '''self'''
|
|
media-src:
|
|
- '''self'''
|
|
object-src:
|
|
- '''self'''
|
|
- 'blob:'
|
|
script-src:
|
|
- '''self'''
|
|
- '''unsafe-inline'''
|
|
style-src:
|
|
- '''self'''
|
|
- '''unsafe-inline'''
|