We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 3c2b4e2 commit 4e75fcaCopy full SHA for 4e75fca
proxy/nginx.conf
@@ -12,6 +12,8 @@ http {
12
listen 80;
13
14
add_header X-Frame-Options "DENY";
15
+ # Content Security Policy for MapLibre GL with PhotoPrism tile server
16
+ add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' 'unsafe-inline' https://cdn.photoprism.app; img-src 'self' data: blob: https://maps.photoprism.app https://cdn.photoprism.app; font-src 'self' https://cdn.photoprism.app; connect-src 'self' https://maps.photoprism.app https://cdn.photoprism.app; worker-src 'self' blob:; child-src 'self' blob:;";
17
18
location / {
19
# React routes are entirely on the App side in the web browser
0 commit comments