fix csp

hpi-schul-cloud · Aug 1, 2024 · 5c20991 · 5c20991
1 parent c9b497a
commit 5c20991
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/dockerconf/nginx.conf.template b/dockerconf/nginx.conf.template
@@ -2,7 +2,7 @@ server {
     listen 4100;
     server_name  localhost;
 
-    set $csp "default-src 'self'; base-uri 'self'; script-src 'nonce-$request_id' 'strict-dynamic' 'unsafe-inline' https:; object-src 'none'; font-src 'self' data:; img-src 'self' data:; style-src 'self' 'unsafe-inline'; frame-src 'self' https://docs.dbildungscloud.de/";
+    set $csp "default-src 'self' ${API_URL}; base-uri 'self'; script-src 'nonce-$request_id' 'strict-dynamic' 'unsafe-inline' https:; object-src 'none'; font-src 'self' data:; img-src 'self' data:; style-src 'self' 'unsafe-inline'; frame-src 'self' https://docs.dbildungscloud.de/";
 
     location /status {
         stub_status;