Restrict even more our Content-Security-Policy

Urgau · Urgau · commit deae34bde385 · 2025-07-06T16:06:44.000+02:00
diff --git a/src/gha_logs.rs b/src/gha_logs.rs
@@ -207,7 +207,9 @@ async fn process_logs(
         .header(CONTENT_TYPE, "text/html; charset=utf-8")
         .header(
             CONTENT_SECURITY_POLICY,
-            format!("script-src 'nonce-{nonce}' 'self'"),
+            format!(
+                "default-src 'none'; script-src 'nonce-{nonce}' 'self'; style-src 'unsafe-inline'; img-src www.rust-lang.org"
+            ),
         )
         .body(Body::from(html))?);
 }

Original file line number	Diff line number	Diff line change
`@@ -207,7 +207,9 @@ async fn process_logs(`
`207`	`207`	`.header(CONTENT_TYPE, "text/html; charset=utf-8")`
`208`	`208`	`.header(`
`209`	`209`	`CONTENT_SECURITY_POLICY,`
`210`		`- format!("script-src 'nonce-{nonce}' 'self'"),`
	`210`	`+ format!(`
	`211`	`+ "default-src 'none'; script-src 'nonce-{nonce}' 'self'; style-src 'unsafe-inline'; img-src www.rust-lang.org"`
	`212`	`+ ),`
`211`	`213`	`)`
`212`	`214`	`.body(Body::from(html))?);`
`213`	`215`	`}`