From: Marius Gavrilescu <marius@ieval.ro>
Date: Wed, 25 Feb 2015 20:41:45 +0000 (+0200)
Subject: Remove 'self' from script-src and style-src
X-Git-Url: http://git.ieval.ro/?a=commitdiff_plain;h=a0aa934a68a90d784546588383363bdaed2f0bfb;p=plack-app-gruntmaster.git

Remove 'self' from script-src and style-src
---

diff --git a/app.psgi b/app.psgi
index ab5ca00..a4e0c34 100644
--- a/app.psgi
+++ b/app.psgi
@@ -22,8 +22,8 @@ form-action 'self'
 frame-ancestors 'none'
 img-src 'self' https://static.mindcoding.ro https://www.google-analytics.com/collect
 referrer origin-when-cross-origin
-script-src 'self' https://static.mindcoding.ro/js.js https://www.google-analytics.com/analytics.js
-style-src 'self' https://static.mindcoding.ro/css/
+script-src https://static.mindcoding.ro/js.js https://www.google-analytics.com/analytics.js
+style-src https://static.mindcoding.ro/css/
 CSP
 	chomp $csp;
 	$csp =~ s/\n/; /gr;