Optimized CSP rules

2025-08-29 15:06:26 +02:00 · 2025-06-03 14:32:15 +02:00
parent cc9b634bb8
commit ebd74db3c4
27 changed files with 57 additions and 39 deletions
--- a/roles/docker-matrix/vars/configuration.yml
+++ b/roles/docker-matrix/vars/configuration.yml
@@ -20,7 +20,7 @@ features:
  central_database:   true
 csp:
  flags:
-    script-src:
+    script-src-elem:
      unsafe-inline: true
      unsafe-eval:   true
    style-src:
@@ -29,7 +29,7 @@ csp:
    connect-src:
      - "{{ primary_domain }}"
      - "matrix.{{ primary_domain }}"
-    script-src:
+    script-src-elem:
      - "element.{{ primary_domain }}"
      - "https://cdn.jsdelivr.net"
 plugins: