From a0aa934a68a90d784546588383363bdaed2f0bfb Mon Sep 17 00:00:00 2001
From: Marius Gavrilescu <marius@ieval.ro>
Date: Wed, 25 Feb 2015 22:41:45 +0200
Subject: [PATCH] Remove 'self' from script-src and style-src

---
 app.psgi | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/app.psgi b/app.psgi
index ab5ca00..a4e0c34 100644
--- a/app.psgi
+++ b/app.psgi
@@ -22,8 +22,8 @@ form-action 'self'
 frame-ancestors 'none'
 img-src 'self' https://static.mindcoding.ro https://www.google-analytics.com/collect
 referrer origin-when-cross-origin
-script-src 'self' https://static.mindcoding.ro/js.js https://www.google-analytics.com/analytics.js
-style-src 'self' https://static.mindcoding.ro/css/
+script-src https://static.mindcoding.ro/js.js https://www.google-analytics.com/analytics.js
+style-src https://static.mindcoding.ro/css/
 CSP
 	chomp $csp;
 	$csp =~ s/\n/; /gr;
-- 
2.39.2