Don't restrict forms in CSP (#327)

Rudloff · Nov 4, 2020 · c0b2acf · c0b2acf
1 parent 17422d8
commit c0b2acf
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/classes/Middleware/CspMiddleware.php b/classes/Middleware/CspMiddleware.php
@@ -40,10 +40,10 @@ public function applyHeader(Response $response)
         $csp->addDirective('default-src', [])
             ->addDirective('font-src', ['self' => true])
             ->addDirective('style-src', ['self' => true])
-            ->addDirective('form-action', ['self' => true])
             ->addDirective('manifest-src', ['self' => true])
             ->addDirective('base-uri', [])
             ->addDirective('frame-ancestors', [])
+            ->addSource('form-action', '*')
             ->addSource('img-src', '*');
 
         if ($this->config->debug) {