Enforce Content Security Policy

2020-12-19 21:49:10 -08:00 · 2020-12-19 21:49:10 -08:00 · a754d42b9e
commit a754d42b9e
parent c7e0234d33
1 changed files with 1 additions and 0 deletions
--- a/templates/base.html
+++ b/templates/base.html
@ -3,6 +3,7 @@
 	<head>
 		{% block head %}
 		<title>{% block title %}{% endblock %}</title>
+		<meta http-equiv="Content-Security-Policy" content="default-src 'self';">
 		<meta name="description" content="View on Libreddit, an alternative private front-end to Reddit.">
 		<meta name="viewport" content="width=device-width, initial-scale=1.0">
 		<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />