[TWIG] Added CSP in base template meta tag. This isn't optimal.

This commit is contained in:
Eliseu Amaro 2021-11-16 23:47:25 +00:00
parent f07dce4604
commit e1b9ab4b9a
No known key found for this signature in database
GPG Key ID: 96DA09D4B97BC2D5

View File

@ -2,6 +2,8 @@
<html lang="en">
<head>
{% block meta %}
{# This is far from perfect. The response headers should already come with this. #}
{% if app.request.server.get('APP_ENV') not in ['test', 'dev'] %}<meta http-equiv="Content-Security-Policy" content="default-src https:">{% endif %}
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="home" href="/">