refactor: add form-action to improve csp configuration

Liber-UFPE · May 10, 2024 · 1682973 · 1682973
1 parent 2f53f4b
commit 1682973
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/main/resources/base.conf b/src/main/resources/base.conf
@@ -25,7 +25,7 @@ micronaut {
     csp {
       enabled = true
       generateNonce = true
-      policyDirectives = "default-src 'self'; script-src 'strict-dynamic' 'unsafe-inline' 'nonce-{#nonceValue}' http: https:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data:; connect-src 'self'; object-src 'none'; base-uri 'none'; frame-ancestors 'self';"
+      policyDirectives = "default-src 'self'; script-src 'strict-dynamic' 'unsafe-inline' 'nonce-{#nonceValue}' http: https:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data:; connect-src 'self'; object-src 'none'; base-uri 'none'; form-action 'self'; frame-ancestors 'self';"
     }
   }
 }