Add proper Content Security Policy for websockets

ec498e62 · Tim Fechner · fae05e71 · ec498e62 · ec498e62
Commit ec498e62 authored 8 years ago by Tim Fechner
--- a/salt_observer/templates/_layout/base.html
+++ b/salt_observer/templates/_layout/base.html
@@ -4,6 +4,7 @@
 <html>
    <head>
        <meta charset="utf-8">
+        {% block meta-extra %}{% endblock %}

        <title>{% block title-extra %}{% endblock %} | Salt-Observer</title>


--- a/salt_observer/templates/events.html
+++ b/salt_observer/templates/events.html
@@ -5,6 +5,10 @@
 {% block nav-events %}class="active"{% endblock %}
 {% block title-extra %}Events{% endblock %}

+{% block meta-extra %}
+    <meta http-equiv="Content-Security-Policy" content="connect-src *">
+{% endblock %}
+
 {% block post-script %}
    <script>
        var token = "{{ request.session.salt_tornado_token }}";