mirror of
https://github.com/pretix/pretix.git
synced 2026-05-03 14:54:04 +00:00
Stripe apparently needs frame and image transport
This commit is contained in:
@@ -149,9 +149,9 @@ class SecurityMiddleware:
|
||||
'default-src': "{static}",
|
||||
'script-src': '{static} https://js.stripe.com',
|
||||
'object-src': "'none'",
|
||||
'frame-src': "'none'",
|
||||
'frame-src': '{static} https://js.stripe.com',
|
||||
'style-src': "{static}",
|
||||
'img-src': "{static} data:",
|
||||
'img-src': "{static} data: https://*.stripe.com",
|
||||
'form-action': "{dynamic}",
|
||||
}
|
||||
if 'Content-Security-Policy' in resp:
|
||||
|
||||
Reference in New Issue
Block a user