chore: add base and form to csp

ozwaldorf · Oct 15, 2024 · 3b2c25f · 3b2c25f
1 parent 84fe754
commit 3b2c25f
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/main.rs b/src/main.rs
@@ -100,8 +100,10 @@ fn main(req: Request) -> Result<Response, Error> {
         [
             "default-src *",
             "frame-ancestors 'none'",
-            "style-src * 'unsafe-inline'",
             "object-src 'none'",
+            "base-uri 'none'",
+            "form-action 'none'",
+            "style-src * 'unsafe-inline'",
             &format!("script-src 'nonce-{nonce}'"),
         ]
         .join(";"),