Applying CSP changes

maykinmedia · Sep 20, 2022 · 6e3b4b7 · 6e3b4b7
1 parent dd6126e
commit 6e3b4b7
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/open_inwoner/conf/app/csp.py b/src/open_inwoner/conf/app/csp.py
@@ -10,12 +10,13 @@
 #
 # NOTE: make sure values are a tuple or list, and to quote special values like 'self'
 CSP_DEFAULT_SRC = (
-    "'none'",
+    "'self'",
 )  # ideally we'd use BASE_URI but it'd have to be lazy or cause issues
 CSP_BASE_URI = ("'self'",)
 CSP_FONT_SRC = ("'self'",)
 CSP_FRAME_ANCESTORS = ["'self'"]
 CSP_FRAME_SRC = ["'self'"]
+CSP_OBJECT_SRC = "'none'"
 CSP_SCRIPT_SRC = (
     "'self'",
     "https://service.pdok.nl/brt/achtergrondkaart/wmts/v2_0/standaard/EPSG:28992/",