skorotkiewicz/rDrama
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix: HCaptcha broken.

Browse source
This commit is contained in:
Ben Rog-Wilhelm 2023-10-12 12:33:10 -05:00
parent c5d380afb1
commit fc8834950e
4 changed files with 4 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

4
files/routes/allroutes.py
View file

@ -54,10 +54,10 @@ def after_request(response: Response):
response.headers.add("Content-Security-Policy", ("""
script-src 'self' 'unsafe-inline' https://*.googletagmanager.com https://hcaptcha.com https://*.hcaptcha.com;
img-src 'self' https://*.google-analytics.com https://*.googletagmanager.com;
connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://hcaptcha.com, https://*.hcaptcha.com;
connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://hcaptcha.com https://*.hcaptcha.com;
object-src 'none';
frame-src https://hcaptcha.com https://*.hcaptcha.com;
style-src https://hcaptcha.com https://*.hcaptcha.com;
style-src 'self' 'unsafe-inline' https://hcaptcha.com https://*.hcaptcha.com;
""".replace('\n', '').replace('\t', ' ')))
response.headers.add("Strict-Transport-Security", "max-age=31536000")
response.headers.add("X-Frame-Options", "deny")