remove legacy script-src directive
This commit is contained in:
parent
0d08f3606d
commit
262d110266
@ -52,7 +52,7 @@ public class PdfViewer extends AppCompatActivity implements LoaderManager.Loader
|
||||
"form-action 'none'; " +
|
||||
"connect-src https://localhost/placeholder.pdf; " +
|
||||
"img-src blob: 'self'; " +
|
||||
"script-src 'self' 'resource://pdf.js'; " +
|
||||
"script-src 'self'; " +
|
||||
"style-src 'self'; " +
|
||||
"frame-ancestors 'none'; " +
|
||||
"base-uri 'none'";
|
||||
|
Loading…
Reference in New Issue
Block a user