saret/vaultwarden
1
0
Fork 0
mirror of https://github.com/dani-garcia/vaultwarden.git synced 2025-10-28 00:40:01 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'GeekCornerGH-fix/2fa_directory-csp'

Browse Source
This commit is contained in:
Daniel García
2023-01-12 19:15:42 +01:00
parent dd5e4cec73 606a1bbfcb
commit b7cbca590c
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/util.rs
View File

@@ -50,7 +50,7 @@ impl Fairing for AppHeaders {
// Have I Been Pwned and Gravator to allow those calls to work.
// # Connect src:
// Leaked Passwords check: api.pwnedpasswords.com
// 2FA/MFA Site check: 2fa.directory
// 2FA/MFA Site check: api.2fa.directory
// # Mail Relay: https://bitwarden.com/blog/add-privacy-and-security-using-email-aliases-with-bitwarden/
// app.simplelogin.io, app.anonaddy.com, api.fastmail.com, quack.duckduckgo.com
let csp = format!(
@@ -73,7 +73,7 @@ impl Fairing for AppHeaders {
{icon_service_csp}; \
connect-src 'self' \
https://api.pwnedpasswords.com \
https://2fa.directory \
https://api.2fa.directory \
https://app.simplelogin.io/api/ \
https://app.anonaddy.com/api/ \
https://api.fastmail.com/ \