CGM_Public/pretix_cgo
1
0
Fork 0
forked from CGM_Public/pretix_original
Code Pull Requests Actions Activity

Stripe apparently needs frame and image transport

Browse Source
This commit is contained in:
Raphael Michel
2016-04-10 17:36:20 +02:00
parent 02fb27fa5d
commit 10e31bdf32
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/pretix/base/middleware.py
View File

@@ -149,9 +149,9 @@ class SecurityMiddleware:
'default-src': "{static}", 'default-src': "{static}",
'script-src': '{static} https://js.stripe.com', 'script-src': '{static} https://js.stripe.com',
'object-src': "'none'", 'object-src': "'none'",
'frame-src': "'none'", 'frame-src': '{static} https://js.stripe.com',
'style-src': "{static}", 'style-src': "{static}",
'img-src': "{static} data:", 'img-src': "{static} data: https://*.stripe.com",
'form-action': "{dynamic}", 'form-action': "{dynamic}",
} }
if 'Content-Security-Policy' in resp: if 'Content-Security-Policy' in resp: