fix: remove csp script elem

weni-ai · Dec 18, 2024 · 3173417 · 3173417
1 parent e31af5c
commit 3173417
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/nginx.conf b/nginx.conf
@@ -34,7 +34,7 @@ http {
     set $CSP_WORKER_SRC "worker-src data: blob: https://accounts.google.com/";
     set $CSP_FRAME_ANCESTORS "frame-ancestors 'self' *.weni.ai https://accounts.google.com/ https://appvtexio.stg.cloud.weni.ai/ https://anadev--wenipartnerbr.myvtex.com/ https://wenipartnerbr.myvtex.com/";
 
-    add_header Content-Security-Policy "${CSP_DEFAULT}; ${CSP_SCRIPT}; ${CSP_SCRIPT_ELEM}; ${CSP_STYLE}; ${CSP_FONT}; ${CSP_IMAGE}; ${CSP_CONNECT}; ${CSP_FRAME_SRC}; ${CSP_WORKER_SRC}; ${CSP_FRAME_ANCESTORS};";
+    add_header Content-Security-Policy "${CSP_DEFAULT}; ${CSP_SCRIPT}; ${CSP_STYLE}; ${CSP_FONT}; ${CSP_IMAGE}; ${CSP_CONNECT}; ${CSP_FRAME_SRC}; ${CSP_WORKER_SRC}; ${CSP_FRAME_ANCESTORS};";
     include                     /usr/share/nginx/html/headers;
     listen                      8080;
     server_name                 localhost;