Update oban_web to 2.12
- Had to disable nonces for style-src directives (seems like they're not propagated everywhere in oban_web's templates) - Doesn't seem to support crons or workflows when backed by SQLite
This commit is contained in:
@@ -185,7 +185,7 @@ defmodule MusicLibraryWeb.Router do
|
||||
csp =
|
||||
"default-src 'self'" <>
|
||||
"; script-src 'self' 'nonce-#{nonce}'" <>
|
||||
"; style-src 'self' 'unsafe-inline' 'nonce-#{nonce}' https://rsms.me" <>
|
||||
"; style-src 'self' 'unsafe-inline' https://rsms.me" <>
|
||||
"; font-src 'self' data: https://rsms.me" <>
|
||||
"; img-src 'self' data: blob: 'nonce-#{nonce}' #{@img_origins}" <>
|
||||
"; connect-src 'self' https://fastly.jsdelivr.net" <>
|
||||
|
||||
Reference in New Issue
Block a user