spec: sync object-src with default-src (#715)
This commit is contained in:
parent
9778cf97a2
commit
2ca6a59d2f
1 changed files with 1 additions and 0 deletions
|
|
@ -289,6 +289,7 @@ When `_meta.ui` is present on **both**, the content-item value takes precedence.
|
|||
style-src 'self' 'unsafe-inline';
|
||||
img-src 'self' data:;
|
||||
media-src 'self' data:;
|
||||
object-src 'none';
|
||||
connect-src 'none';
|
||||
```
|
||||
|
||||
|
|
|
|||
Loading…
Reference in a new issue