fix: Use correct CSP for login page

This commit is contained in:
Jade Ellis 2025-05-10 14:22:50 +01:00
parent 5c73d3d168
commit c1bad98702
No known key found for this signature in database
GPG key ID: 8705A2A3EBF77BD2

View file

@ -40,10 +40,7 @@ impl IntoResponse for OidcResponse {
.header(header::CONTENT_TYPE, "text/html") .header(header::CONTENT_TYPE, "text/html")
.header( .header(
header::CONTENT_SECURITY_POLICY, header::CONTENT_SECURITY_POLICY,
format!( format!("default-src 'nonce-{}'; form-action 'self';", self.nonce),
"default-src 'nonce-{}'; form-action https://eon.presentmatter.one/;",
self.nonce
),
) )
.body(body.into()) .body(body.into())
.unwrap() .unwrap()