bundle/hedgedoc add new csp defaults

2021-09-14 20:22:51 +02:00 · 2021-09-14 20:22:51 +02:00 · c9f9a27096
commit c9f9a27096
parent 738dbd94a0
1 changed files with 5 additions and 2 deletions
--- a/bundles/hedgedoc/metadata.py
+++ b/bundles/hedgedoc/metadata.py
@ -14,10 +14,13 @@ defaults = {
                'csp': {
                    'enable': True,
                    'directives': {},
-                    'upgradeInsecureRequests': 'auto',
                    'addDefaults': True,
                    'addDisqus': False,
-                    'addGoogleAnalytics': False
+                    'addGoogleAnalytics': False,
+                    'upgradeInsecureRequests': 'auto',
+                    'reportURI': 'undefined',
+                    'allowFraming': False,
+                    'allowPDFEmbed': False,
                },
                'cookiePolicy': 'lax',
                'db': {