fix: Use correct CSP for login page

This commit is contained in:
Jade Ellis
2025-11-11 11:34:26 -05:00
committed by Ginger
parent 68ca6eabe3
commit 5bd1bedad0
+1 -4
View File
@@ -40,10 +40,7 @@ fn into_response(self) -> Response<Body> {
.header(header::CONTENT_TYPE, "text/html")
.header(
header::CONTENT_SECURITY_POLICY,
format!(
"default-src 'nonce-{}'; form-action https://eon.presentmatter.one/;",
self.nonce
),
format!("default-src 'nonce-{}'; form-action 'self';", self.nonce),
)
.body(body.into())
.unwrap()