fix: Use correct CSP for login page

This commit is contained in:
Jade Ellis 2025-05-10 14:22:50 +01:00 committed by nexy7574
parent 042657804b
commit 30954c7f13
No known key found for this signature in database
GPG key ID: 0FA334385D0B689F

View file

@ -40,10 +40,7 @@ impl IntoResponse for OidcResponse {
.header(header::CONTENT_TYPE, "text/html")
.header(
header::CONTENT_SECURITY_POLICY,
format!(
"default-src 'nonce-{}'; form-action https://eon.presentmatter.one/;",
self.nonce
),
format!("default-src 'nonce-{}'; form-action 'self';", self.nonce),
)
.body(body.into())
.unwrap()