View | Details | Raw Unified | Return to bug 38365
Collapse All | Expand All

(-)a/etc/koha-conf.xml (-1 / +15 lines)
Lines 308-312 Link Here
308
   <parallel_loops_count>1</parallel_loops_count>
308
   <parallel_loops_count>1</parallel_loops_count>
309
 </auto_renew_cronjob>
309
 </auto_renew_cronjob>
310
310
311
 <content_security_policy>
312
   <opac>
313
     <!-- supported values: report-only, enabled. Any other value, including unset, disables the feature. -->
314
     <csp_mode></csp_mode>
315
     <!-- defines the value of the CSP header. _CSP_NONCE_ can be used placeholder for the generated CSP nonce. -->
316
     <csp_header_value>default-src 'self'; script-src 'self' 'unsafe-eval' _CSP_NONCE_; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; object-src 'none'</csp_header_value>
317
   </opac>
318
319
   <intranet>
320
     <!-- supported values: report-only, enabled. Any other value, including unset, disables the feature. -->
321
     <csp_mode></csp_mode>
322
     <!-- defines the value of the CSP header. _CSP_NONCE_ can be used placeholder for the generated CSP nonce. -->
323
     <csp_header_value>default-src 'self'; script-src 'self' 'unsafe-eval' _CSP_NONCE_; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; object-src 'none'</csp_header_value>
324
   </intranet>
325
 </content_security_policy>
311
</config>
326
</config>
312
</yazgfs>
327
</yazgfs>
313
- 

Return to bug 38365