Relax CSP for connect-src

This commit is contained in:
Tankred Hase 2014-07-17 18:03:21 +02:00
parent bfda677b1b
commit c803caf1d3
1 changed files with 1 additions and 1 deletions

View File

@ -5,7 +5,7 @@
<title>Mail</title>
<!-- Theses CSP rules are used as a fallback in runtimes such as Cordova -->
<meta http-equiv="Content-Security-Policy" content="default-src 'self' chrome-extension:; object-src 'none'; connect-src 'self' chrome-extension: https://*.whiteout.io; style-src 'self' chrome-extension: 'unsafe-inline'; img-src 'self' chrome-extension: data:">
<meta http-equiv="Content-Security-Policy" content="default-src 'self' chrome-extension:; object-src 'none'; connect-src *; style-src 'self' chrome-extension: 'unsafe-inline'; img-src 'self' chrome-extension: data:">
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0">
<link rel="stylesheet" media="all" href="css/all.min.css" type="text/css">