manifest: drop content-security-policy

cockpit-project / cockpit-machines

Cockpit UI for virtual machines

GNU Lesser General Public License v2.1

276 stars 72 forks source link

manifest: drop content-security-policy #1719

Closed jelly closed 1 month ago

jelly commented 1 month ago

The default content-security-policy of cockpit-bridge is enough for files it already includes img-src: 'self' data: and frame-src is not needed as we don't have or want any iframes or frames in machines.

Same as https://github.com/cockpit-project/cockpit-files/pull/646

martinpitt commented 1 month ago

/packit test