From 1c875243f3939c9459eece18d384bef67ddbac6b Mon Sep 17 00:00:00 2001 From: Christian <42749713+rAcHekLoS@users.noreply.github.com> Date: Fri, 17 Sep 2021 11:08:19 +0200 Subject: [PATCH] Add hashes for standalone video/chat (#1413) --- router/middleware/headers.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/router/middleware/headers.go b/router/middleware/headers.go index e5c4e4647..713206ada 100644 --- a/router/middleware/headers.go +++ b/router/middleware/headers.go @@ -12,7 +12,7 @@ func SetHeaders(w http.ResponseWriter) { // Content security policy csp := []string{ - "script-src 'self' 'sha256-2HPCfJIJHnY0NrRDPTOdC7AOSJIcQyNxzUuut3TsYRY='", + "script-src 'self' 'sha256-2HPCfJIJHnY0NrRDPTOdC7AOSJIcQyNxzUuut3TsYRY=' 'sha256-qYEKg5UMg/KbbMBkyPIGsxtkfn/safeLBT08DK3592g=' 'sha256-2erOadwY1DsoNdxVjGlxldMJrFEUzr5sLDdB8lmm9m8=' 'sha256-DgrU+KwEGMFcB8B2ZdQyuxWWvTm7LeGpc+8SkxbSxGA='", "worker-src 'self' blob:", // No single quotes around blob: } w.Header().Set("Content-Security-Policy", strings.Join(csp, "; "))