Add CSP to html files

Mirobit · Mirobit · commit 5f83db026514 · 2023-08-14T18:01:53.000+02:00
diff --git a/login.html b/login.html
@@ -1,6 +1,9 @@
 <!DOCTYPE html>
   <head>
     <meta charset="utf-8">
+    <meta
+    http-equiv="Content-Security-Policy"
+    content="default-src 'self'; script-src 'none'; style-src 'self' 'unsafe-inline'; img-src data: 'self'" />
     <title>Login</title>
     <link rel="stylesheet" type="text/css" href="assets/css/style.login.css" />
     <link href="assets/images/favicon.ico" rel="icon">
diff --git a/views/header.phtml b/views/header.phtml
@@ -1,7 +1,11 @@
 <!DOCTYPE html>
 <html lang="en">
   <head>
-	<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
+  <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
+  <meta
+  http-equiv="Content-Security-Policy"
+  content="default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src data: 'self'" />
+
 	<!-- Meta, title, CSS, favicons, etc. -->
 	<meta charset="utf-8">
 	<meta http-equiv="X-UA-Compatible" content="IE=edge">
