aboutsummaryrefslogtreecommitdiff
path: root/content/articles
diff options
context:
space:
mode:
authorPaul Duncan <pabs@pablotron.org>2024-06-03 10:57:43 -0400
committerPaul Duncan <pabs@pablotron.org>2024-06-03 10:57:43 -0400
commit14b9a10eb685c8d150d14c25615589715d425db3 (patch)
tree52a0743680c3860ed1a23a51c156bd352f315be6 /content/articles
parentcdfb6304a84aa2dd6c4039835b14f361755441a7 (diff)
downloadpablotron.org-14b9a10eb685c8d150d14c25615589715d425db3.tar.bz2
pablotron.org-14b9a10eb685c8d150d14c25615589715d425db3.zip
content/articles/site-backend.md: add content-security-policy style-src-attr exception so viewing svgs works properly in firefox
Diffstat (limited to 'content/articles')
-rw-r--r--content/articles/site-backend.md6
1 files changed, 6 insertions, 0 deletions
diff --git a/content/articles/site-backend.md b/content/articles/site-backend.md
index ca36b2d..673c20d 100644
--- a/content/articles/site-backend.md
+++ b/content/articles/site-backend.md
@@ -297,6 +297,12 @@ redirects removed:
Header set Cache-Control "max-age=31536000, public"
</FilesMatch>
+ # allow style-src-attr unsafe-inline for svgs
+ # (without this svgs do not render in firefox)
+ <FilesMatch "\.svg$">
+ Header set "Content-Security-Policy" "default-src 'self'; img-src 'self'; style-src-attr 'self' 'unsafe-inline'"
+ </FilesMatch>
+
# expose webhook
<Location /hooks/>
ProxyPass "http://localhost:9000/"