Merge pull request #74 from awslabs/yanbasic/feature/org

fix(be): add SCP headers in nginx config
awslabs · May 14, 2023 · a8e877d · a8e877d
2 parents 2e78221 + 9a974e6
commit a8e877d
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/source/portal/nginx-config/nginx.conf b/source/portal/nginx-config/nginx.conf
@@ -26,6 +26,7 @@ http {
         proxy_hide_header        X-Powered-By;
         add_header  X-Frame-Options  deny;
         add_header  X-Content-Type-Options  nosniff;
+        add_header Content-Security-Policy "default-src 'self' *.okta.com tmnk.net; img-src 'self' blob: data:; style-src 'self' 'unsafe-inline' blob: data:; font-src 'self' blob: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval';";
         if ($request_method !~ ^(GET|HEAD|POST)$ ) {
           return    444;
         }