http-equiv Content-Security-Policy

phpsysinfo · Feb 18, 2023 · e65ec83 · e65ec83
1 parent 47910f6
commit e65ec83
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/templates/html/index_bootstrap.html b/templates/html/index_bootstrap.html
@@ -3,6 +3,7 @@
 <head>
     <meta charset="utf-8">
     <meta http-equiv="X-UA-Compatible" content="IE=edge">
+    <meta http-equiv="Content-Security-Policy" content="default-src 'unsafe-inline' 'unsafe-eval' 'self'">
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <meta name="apple-mobile-web-app-capable" content="yes">
     <meta name="mobile-web-app-capable" content="yes">

diff --git a/templates/html/index_dynamic.html b/templates/html/index_dynamic.html
@@ -5,6 +5,7 @@
     <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
     <meta http-equiv="Content-Style-Type" content="text/css" />
     <meta http-equiv="Content-Script-Type" content="text/javascript" />
+    <meta http-equiv="Content-Security-Policy" content="default-src 'unsafe-inline' 'unsafe-eval' 'self'" />
     <meta name="Description" content="phpSysInfo is a customizable PHP script that displays information about your system nicely" />
     <noscript>
       <meta http-equiv="refresh" content="2; URL=index.php?disp=static" />