only put the hostname in the CSP headers so that we accept as source either http or https or any port. Useful for multiport.

This commit is contained in:
Isaac Connor 2020-08-09 22:18:07 -04:00
parent a001c93321
commit b4a3ccdfed
1 changed files with 1 additions and 1 deletions

View File

@ -40,7 +40,7 @@ function CSPHeaders($view, $nonce) {
if ( ! $Servers )
$Servers = ZM\Server::find();
$additionalScriptSrc = implode(' ', array_map(function($S){return $S->Url();}, $Servers));
$additionalScriptSrc = implode(' ', array_map(function($S){return $S->Hostname();}, $Servers));
switch ($view) {
case 'login': {
if (defined('ZM_OPT_USE_GOOG_RECAPTCHA')