about summary refs log tree commit diff
path: root/templates
diff options
context:
space:
mode:
authorVincent Ambo <tazjin@gmail.com>2018-04-14T15·59+0200
committerVincent Ambo <tazjin@gmail.com>2018-04-14T15·59+0200
commit324778c7e008128b8e9e1ea1699cd5250a81c73d (patch)
treed6e181fe893d02a2a1cd4afa539e589865f2a7f0 /templates
parentb684320a73933b2c98096fef73f1ae62e0e71596 (diff)
fix(templates): Set CSPs on templates
Diffstat (limited to 'templates')
-rw-r--r--templates/index.html1
-rw-r--r--templates/new-thread.html1
-rw-r--r--templates/thread.html1
3 files changed, 3 insertions, 0 deletions
diff --git a/templates/index.html b/templates/index.html
index f499f4047e3b..35cfeba05023 100644
--- a/templates/index.html
+++ b/templates/index.html
@@ -3,6 +3,7 @@
   <head>
     <meta charset="utf-8">
     <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
+    <meta http-equiv="Content-Security-Policy" content="script-src 'self';">
     <!-- Bootstrap CSS -->
     <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css" integrity="sha384-Gn5384xqQ1aoWXA+058RXPxPg6fy4IWvTNh0E263XmFcJlSAwiGgFAW/dAiS6JXm" crossorigin="anonymous">
     <title>Converse Index</title>
diff --git a/templates/new-thread.html b/templates/new-thread.html
index fec26fb5aa0b..855626b8e423 100644
--- a/templates/new-thread.html
+++ b/templates/new-thread.html
@@ -3,6 +3,7 @@
   <head>
     <meta charset="utf-8">
     <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
+    <meta http-equiv="Content-Security-Policy" content="script-src 'self';">
     <!-- Bootstrap CSS -->
     <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css" integrity="sha384-Gn5384xqQ1aoWXA+058RXPxPg6fy4IWvTNh0E263XmFcJlSAwiGgFAW/dAiS6JXm" crossorigin="anonymous">
     <title>Converse Index</title>
diff --git a/templates/thread.html b/templates/thread.html
index 4909365a8005..6222b9926d6e 100644
--- a/templates/thread.html
+++ b/templates/thread.html
@@ -3,6 +3,7 @@
   <head>
     <meta charset="utf-8">
     <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
+    <meta http-equiv="Content-Security-Policy" content="script-src 'self';">
     <!-- Bootstrap CSS -->
     <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css" integrity="sha384-Gn5384xqQ1aoWXA+058RXPxPg6fy4IWvTNh0E263XmFcJlSAwiGgFAW/dAiS6JXm" crossorigin="anonymous">
     <title>Converse: {{ title }}</title>