Remove 'self' from script-src and style-src

diff --git a/app.psgi b/app.psgi
index ab5ca00659d03dc56b4a76b1fa7a788d57ccfa5d..a4e0c34eca7da9c880ec0ee496a8e24e2be310c9 100644 (file)
--- a/app.psgi
+++ b/app.psgi
@@ -22,8 +22,8 @@ form-action 'self'
 frame-ancestors 'none'
 img-src 'self' https://static.mindcoding.ro https://www.google-analytics.com/collect
 referrer origin-when-cross-origin
-script-src 'self' https://static.mindcoding.ro/js.js https://www.google-analytics.com/analytics.js
-style-src 'self' https://static.mindcoding.ro/css/
+script-src https://static.mindcoding.ro/js.js https://www.google-analytics.com/analytics.js
+style-src https://static.mindcoding.ro/css/
 CSP
        chomp $csp;
        $csp =~ s/\n/; /gr;