remove legacy script-src directive

This commit is contained in:
Daniel Micay 2021-11-21 15:41:15 -05:00
parent 0d08f3606d
commit 262d110266

View File

@ -52,7 +52,7 @@ public class PdfViewer extends AppCompatActivity implements LoaderManager.Loader
"form-action 'none'; " +
"connect-src https://localhost/placeholder.pdf; " +
"img-src blob: 'self'; " +
"script-src 'self' 'resource://pdf.js'; " +
"script-src 'self'; " +
"style-src 'self'; " +
"frame-ancestors 'none'; " +
"base-uri 'none'";