From e0ea3d62086ffdae7bc4d200a8b178304cac2661 Mon Sep 17 00:00:00 2001 From: ErickSkrauch Date: Tue, 20 Oct 2026 03:57:09 +0200 Subject: [PATCH] Allow service workers on CSP --- docker/nginx/account.ely.by.conf.template | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker/nginx/account.ely.by.conf.template b/docker/nginx/account.ely.by.conf.template index f13c5a6..71c03ef 100644 --- a/docker/nginx/account.ely.by.conf.template +++ b/docker/nginx/account.ely.by.conf.template @@ -10,7 +10,7 @@ server { add_header X-Frame-Options "sameorigin" always; add_header X-XSS-Protection "1; mode=block" always; add_header X-Content-Type-Options "nosniff" always; - add_header Content-Security-Policy "default-src 'none';style-src 'self' 'unsafe-inline';script-src 'self' 'unsafe-inline' https://www.google-analytics.com https://recaptcha.net/recaptcha/ https://www.gstatic.com/recaptcha/ https://smartcaptcha.cloud.yandex.ru/;img-src 'self' data: www.google-analytics.com;font-src 'self' data:;connect-src 'self' https://sentry.io https://sentry.ely.by;frame-src https://recaptcha.net/recaptcha/ https://smartcaptcha.cloud.yandex.ru/"; + add_header Content-Security-Policy "default-src 'none';style-src 'self' 'unsafe-inline';script-src 'self' 'unsafe-inline' https://www.google-analytics.com https://recaptcha.net/recaptcha/ https://www.gstatic.com/recaptcha/ https://smartcaptcha.cloud.yandex.ru/;img-src 'self' data: www.google-analytics.com;font-src 'self' data:;connect-src 'self' https://sentry.io https://sentry.ely.by;frame-src https://recaptcha.net/recaptcha/ https://smartcaptcha.cloud.yandex.ru/;worker-src 'self';child-src 'self' https://recaptcha.net/recaptcha/ https://smartcaptcha.cloud.yandex.ru/"; # You can uncomment the next lines to enable debug mode # rewrite_log on;