From 020b43af85aa323539e5a8f2a29313a33d338965 Mon Sep 17 00:00:00 2001 From: James Elliott Date: Fri, 26 Aug 2022 16:16:15 +1000 Subject: [PATCH] docs: update csp template (#3905) --- docs/content/en/configuration/miscellaneous/server.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/content/en/configuration/miscellaneous/server.md b/docs/content/en/configuration/miscellaneous/server.md index dcab6243e..2143bd390 100644 --- a/docs/content/en/configuration/miscellaneous/server.md +++ b/docs/content/en/configuration/miscellaneous/server.md @@ -165,7 +165,7 @@ This customizes the value of the Content-Security-Policy header. It will replace nonce value of the Authelia react bundle. This is an advanced option to customize and you should do sufficient research about how browsers utilize and understand this header before attempting to customize it. -For example, the default CSP template is `default-src 'self'; object-src 'none'; style-src 'self' 'nonce-${NONCE}'`. +For example, the default CSP template is `default-src 'self'; frame-src 'none'; object-src 'none'; style-src 'self' 'nonce-${NONCE}'; frame-ancestors 'none'; base-uri 'self'`. ### buffers