Set base-uri to none in csp configuration

Vincent Dubois · Vincent Dubois · commit 821ba706561b · 2026-03-06T17:50:18.000+01:00
diff --git a/templates/admin/content-security-policy/csp-configuration.ts b/templates/admin/content-security-policy/csp-configuration.ts
@@ -24,4 +24,5 @@ export const cspRules: CspPolicies<AppEnvironment> = {
   'img-src': '\'self\'',
   'connect-src': '\'self\'',
   'media-src': '\'self\'',
+  'base-uri': '\'none\'',
 };
diff --git a/templates/front/content-security-policy/csp-configuration.ts b/templates/front/content-security-policy/csp-configuration.ts
@@ -21,4 +21,5 @@ export const cspRules: CspPolicies<AppEnvironment> = {
   'img-src': '\'self\'',
   'connect-src': '\'self\'',
   'media-src': '\'self\'',
+  'base-uri': '\'none\'',
 };
