wip: fix connect-src

GZTimeWalker · May 22, 2024 · 0995229 · 0995229
1 parent e0fd9a0
commit 0995229
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/GZCTF/Extensions/ConfigurationExtensions.cs b/src/GZCTF/Extensions/ConfigurationExtensions.cs
@@ -19,7 +19,7 @@ public static class ConfigurationExtensions
     };
 
     const string CspTemplate = "default-src 'strict-dynamic' 'nonce-{0}' 'unsafe-inline' http: https:; " +
-                               "style-src 'self' 'unsafe-inline'; img-src * 'self' data:; " +
+                               "style-src 'self' 'unsafe-inline'; img-src * 'self' data:; connect-src 'self'; " +
                                "font-src * 'self' data:; object-src 'none'; frame-src * https:; base-uri 'none';";
 
     public static void AddEntityConfiguration(this IConfigurationBuilder builder,