[gimp-web/oscp] Add https://www.paypal.com to CSP as form-action



commit d311590946fb3ada06c6cc420ef59881305bafeb
Author: Michael Schumacher <schumaml gmx de>
Date:   Sat Apr 4 16:40:21 2020 +0200

    Add https://www.paypal.com to CSP as form-action
    
    This is required to make the PayPal dontation button work. Fixes #177.

 testing.gimp.org/app_data/httpd-cfg/testing.gimp.org.conf | 2 +-
 www.gimp.org/app_data/httpd-cfg/www.gimp.org.conf         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)
---
diff --git a/testing.gimp.org/app_data/httpd-cfg/testing.gimp.org.conf 
b/testing.gimp.org/app_data/httpd-cfg/testing.gimp.org.conf
index d52c39b6..f6800cc4 100644
--- a/testing.gimp.org/app_data/httpd-cfg/testing.gimp.org.conf
+++ b/testing.gimp.org/app_data/httpd-cfg/testing.gimp.org.conf
@@ -35,7 +35,7 @@ m; \
              object-src 'none'; \
              media-src 'self' https://download.gimp.org https://www.mirrorservice.org; \
              base-uri 'self'; \
-             form-action 'self'; \
+             form-action 'self' https://www.paypal.com; \
              frame-ancestors 'self'; \
              "
     Header always set \
diff --git a/www.gimp.org/app_data/httpd-cfg/www.gimp.org.conf 
b/www.gimp.org/app_data/httpd-cfg/www.gimp.org.conf
index 3026bb5d..36ce5320 100644
--- a/www.gimp.org/app_data/httpd-cfg/www.gimp.org.conf
+++ b/www.gimp.org/app_data/httpd-cfg/www.gimp.org.conf
@@ -42,7 +42,7 @@ m; \
              object-src 'none'; \
              media-src 'self' https://download.gimp.org https://www.mirrorservice.org; \
              base-uri 'self'; \
-             form-action 'self'; \
+             form-action 'self' https://www.paypal.com; \
              frame-ancestors 'self'; \
              "
     Header always set \


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]