From 5a8825d01682def020acfd2baf95a44b94790f6f Mon Sep 17 00:00:00 2001 From: Samantaz Fox Date: Sun, 20 Jun 2021 18:43:00 +0200 Subject: [PATCH] Fix quoting of 'none' in CSP header The keyword 'none' must be surrounded by single quotes. Regression introduced by #2168. --- src/invidious.cr | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/invidious.cr b/src/invidious.cr index b1ee1525..f7c8980a 100644 --- a/src/invidious.cr +++ b/src/invidious.cr @@ -187,7 +187,7 @@ before_all do |env| if env.request.resource.starts_with?("/embed") frame_ancestors = "'self' http: https:" else - frame_ancestors = "none" + frame_ancestors = "'none'" end # TODO: Remove style-src's 'unsafe-inline', requires to remove all