mirror of
https://github.com/ajayyy/SponsorBlockServer.git
synced 2025-12-06 11:36:58 +03:00
Add object src to csp
This commit is contained in:
@@ -1,6 +1,6 @@
|
|||||||
import {NextFunction, Request, Response} from 'express';
|
import {NextFunction, Request, Response} from 'express';
|
||||||
|
|
||||||
export function apiCspMiddleware(req: Request, res: Response, next: NextFunction) {
|
export function apiCspMiddleware(req: Request, res: Response, next: NextFunction) {
|
||||||
res.header("Content-Security-Policy", "script-src 'none'");
|
res.header("Content-Security-Policy", "script-src 'none'; object-src 'none'");
|
||||||
next();
|
next();
|
||||||
}
|
}
|
||||||
Reference in New Issue
Block a user