jo/community-backup
1
0
Fork 0
Code Issues 4 Pull requests Projects Releases 15 Packages Wiki Activity Actions

added comment regarding CSP

Browse source 
Closes #11
This commit is contained in:
Johannes Erwerle 2026-10-21 22:11:16 +02:00
parent 26f3d5d033
commit 6013d0bcab
1 changed files with 10 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

10
README.md
View file

@ -177,3 +177,13 @@ BORG_SERVER_PUBKEYS = [
),
]
```
## Webserver Config / Content-Security-Policy
This page by itself does not load external sources and does not use inline javascript/styling.
It only loads javascript, CSS and images.
Therefore the following Content-Security-Policy should work fine in the standard cases:
```
Content-Security-Policy "default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self';"
```