diff --git a/src/web/oidc/response.rs b/src/web/oidc/response.rs index 1dcbd904d..b34c696cc 100644 --- a/src/web/oidc/response.rs +++ b/src/web/oidc/response.rs @@ -40,10 +40,7 @@ fn into_response(self) -> Response { .header(header::CONTENT_TYPE, "text/html") .header( header::CONTENT_SECURITY_POLICY, - format!( - "default-src 'nonce-{}'; form-action https://eon.presentmatter.one/;", - self.nonce - ), + format!("default-src 'nonce-{}'; form-action 'self';", self.nonce), ) .body(body.into()) .unwrap()