From ebcd5fb38420e71a37373bfe22d07977d352bb73 Mon Sep 17 00:00:00 2001 From: Lari Taskula Date: Mon, 27 Oct 2025 19:28:24 +0200 Subject: [PATCH] Bug 38365: Add content_security_policy section to koha-conf.xml To test: 1. xmllint --noout --nonet etc/koha-conf.xml; echo $? 2. Observe 0 Signed-off-by: David Cook --- etc/koha-conf.xml | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/etc/koha-conf.xml b/etc/koha-conf.xml index 6ec2d126e8d..d554a595fb3 100644 --- a/etc/koha-conf.xml +++ b/etc/koha-conf.xml @@ -311,5 +311,20 @@ 1 + + + + + + default-src 'self'; script-src 'self' 'unsafe-eval' 'nonce-_CSP_NONCE_'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; object-src 'none' + + + + + + + default-src 'self'; script-src 'self' 'unsafe-eval' 'nonce-_CSP_NONCE_'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; object-src 'none' + + -- 2.34.1