Commit `253d3cf299`

253d3cf2990b0be4f4ae7b0b6f5b5edf51960db9

Verified · cmc

cmc <hello@cleberg.net> · 2026-04-08 15:29 UTC

fix CSP for img.cleberg.net

Layout: unified · split

linux/nginx/etc/nginx/nginx.conf +9 −1

		@@ -143,7 +143,15 @@ http {
143	143	# Add Content-Security-Policy for HTML documents.
144	144	# custom.d/security/content-security-policy.conf
145	145	map $sent_http_content_type $content_security_policy {
146		~*text/(html\|javascript)\|application/pdf\|xml "default-src 'self'; base-uri 'none'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; upgrade-insecure-requests";
	146	~*text/(html\|javascript)\|application/pdf\|xml "
	147	default-src 'self';
	148	img-src 'self' https://img.cleberg.net;
	149	base-uri 'none';
	150	form-action 'self';
	151	frame-ancestors 'none';
	152	object-src 'none';
	153	upgrade-insecure-requests
	154	";
147	155	}
148	156
149	157	# Add Permissions-Policy for HTML documents.

Commit 253d3cf299