fix: Use correct CSP for login page

This commit is contained in:
Jade Ellis 2025-05-10 14:22:50 +01:00 committed by nexy7574
parent 042657804b
commit 30954c7f13
No known key found for this signature in database
GPG key ID: 0FA334385D0B689F

View file

@ -40,10 +40,7 @@ impl IntoResponse for OidcResponse {
.header(header::CONTENT_TYPE, "text/html") .header(header::CONTENT_TYPE, "text/html")
.header( .header(
header::CONTENT_SECURITY_POLICY, header::CONTENT_SECURITY_POLICY,
format!( format!("default-src 'nonce-{}'; form-action 'self';", self.nonce),
"default-src 'nonce-{}'; form-action https://eon.presentmatter.one/;",
self.nonce
),
) )
.body(body.into()) .body(body.into())
.unwrap() .unwrap()