diff --git a/roles/srv-web-7-7-inj-compose/templates/location.lua.j2 b/roles/srv-web-7-7-inj-compose/templates/location.lua.j2 index 2ee705ee..b58b658e 100644 --- a/roles/srv-web-7-7-inj-compose/templates/location.lua.j2 +++ b/roles/srv-web-7-7-inj-compose/templates/location.lua.j2 @@ -34,6 +34,12 @@ body_filter_by_lua_block { local whole = table.concat(ngx.ctx.buf) ngx.ctx.buf = nil -- clear buffer + -- remove html CSP, due to management via infinito nexus policies + whole = whole:gsub( + ']-http%-equiv=["\']Content%-Security%-Policy["\'][^>]->%s*', + '' + ) + -- build a list of head-injection snippets local head_snippets = {}