Permit forms in docs UI CSP (#1036)

wolveix · web-flow · commit 39f388e30989 · 2026-05-31T00:45:25.000+01:00
diff --git a/api.go b/api.go
@@ -723,7 +723,7 @@ func (a *api) registerDocsRoute() {
 			"connect-src 'self'",
 			"form-action 'none'",
 			"frame-ancestors 'none'",
-			"sandbox allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox",
+			"sandbox allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-forms",
 			"script-src https://unpkg.com/swagger-ui-dist@5.31.1/swagger-ui-bundle.js 'sha256-gRya58TMnKTH/Tne/zBInjBwFUxL66aMDYvPuAX0lNY='",
 			"style-src https://unpkg.com/swagger-ui-dist@5.31.1/swagger-ui.css",
 		}

Original file line number	Diff line number	Diff line change
`@@ -723,7 +723,7 @@ func (a *api) registerDocsRoute() {`
`723`	`723`	`"connect-src 'self'",`
`724`	`724`	`"form-action 'none'",`
`725`	`725`	`"frame-ancestors 'none'",`
`726`		`- "sandbox allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox",`
	`726`	`+ "sandbox allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-forms",`
`727`	`727`	`"script-src https://unpkg.com/swagger-ui-dist@5.31.1/swagger-ui-bundle.js 'sha256-gRya58TMnKTH/Tne/zBInjBwFUxL66aMDYvPuAX0lNY='",`
`728`	`728`	`"style-src https://unpkg.com/swagger-ui-dist@5.31.1/swagger-ui.css",`
`729`	`729`	`}`