Commit `253d3cf299`

253d3cf2990b0be4f4ae7b0b6f5b5edf51960db9

Verified · cmc

cmc <hello@cleberg.net> · 2026-04-08 15:29 UTC

fix CSP for img.cleberg.net

Layout: unified · split

linux/nginx/etc/nginx/nginx.conf +9 −1

	@@ -143,7 +143,15 @@ http {
143	# Add Content-Security-Policy for HTML documents.	143	# Add Content-Security-Policy for HTML documents.
144	# custom.d/security/content-security-policy.conf	144	# custom.d/security/content-security-policy.conf
145	map $sent_http_content_type $content_security_policy {	145	map $sent_http_content_type $content_security_policy {
146	~*text/(html\|javascript)\|application/pdf\|xml "default-src 'self'; base-uri 'none'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; upgrade-insecure-requests";	146	~*text/(html\|javascript)\|application/pdf\|xml "
		147	default-src 'self';
		148	img-src 'self' https://img.cleberg.net;
		149	base-uri 'none';
		150	form-action 'self';
		151	frame-ancestors 'none';
		152	object-src 'none';
		153	upgrade-insecure-requests
		154	";
147	}	155	}
148		156
149	# Add Permissions-Policy for HTML documents.	157	# Add Permissions-Policy for HTML documents.

Commit 253d3cf299