fix: Use correct CSP for login page

This commit is contained in:
Jade Ellis 2025-05-10 14:22:50 +01:00
parent 5c73d3d168
commit c1bad98702
No known key found for this signature in database
GPG key ID: 8705A2A3EBF77BD2

View file

@ -40,10 +40,7 @@ impl IntoResponse for OidcResponse {
.header(header::CONTENT_TYPE, "text/html")
.header(
header::CONTENT_SECURITY_POLICY,
format!(
"default-src 'nonce-{}'; form-action https://eon.presentmatter.one/;",
self.nonce
),
format!("default-src 'nonce-{}'; form-action 'self';", self.nonce),
)
.body(body.into())
.unwrap()