rugk fd7d05e862 Add base URL as default CSP restriction ...

This follows an [HTTP Observatory recommendation](https://observatory.mozilla.org/analyze/privatebin.net):
> Restricts use of the <base> tag by using base-uri 'none', base-uri 'self', or specific origins.

Given we don't use that anywhere, this safe should be safe. (not tested practically though)

2021-04-16 22:04:28 +02:00

9.5 KiB

Raw Blame History

View Raw