Merge pull request #76 from Coreoz/feature/csp

Set base-uri to none in csp configuration

Author: amanteaux

templates/admin/content-security-policy/csp-configuration.ts

@@ -24,4 +24,5 @@ export const cspRules: CspPolicies<AppEnvironment> = {
   'img-src': '\'self\'',
   'connect-src': '\'self\'',
   'media-src': '\'self\'',
+  'base-uri': '\'none\'',
 };

templates/front/content-security-policy/csp-configuration.ts

@@ -21,4 +21,5 @@ export const cspRules: CspPolicies<AppEnvironment> = {
   'img-src': '\'self\'',
   'connect-src': '\'self\'',
   'media-src': '\'self\'',
+  'base-uri': '\'none\'',
 };