From 5836f0a76d86ee22b9a28d759952f4362571e974 Mon Sep 17 00:00:00 2001 From: cesine Date: Fri, 23 Jan 2026 23:00:42 -0500 Subject: [PATCH] need to fix the csp delimiter --- etc/local.ini | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/etc/local.ini b/etc/local.ini index dccc14b8..f8631b0b 100644 --- a/etc/local.ini +++ b/etc/local.ini @@ -9,7 +9,8 @@ credentials = true attachments_enable = true ; https://docs.couchdb.org/en/stable/cve/2021-38295.html ; use nginx instead to allow only signed couchapps when on deployed server -attachments_header_value = "child-src 'self' data: blob:; default-src 'self'; connect-src 'self' https://corpusdev.example.com https://localhost:3183 https://www.google-analytics.com; img-src 'self' data: https://secure.gravatar.com; font-src 'self' https://themes.googleusercontent.com; script-src 'self' 'unsafe-eval' https://www.google-analytics.com; style-src 'self' 'unsafe-inline';" +; " quotes are in the csp and need to be removed +attachments_header_value = "child-src 'self' data: blob:; default-src 'self'; connect-src 'self' https://corpusdev.example.com https://localhost:3183 https://www.google-analytics.com; img-src 'self' data: https://secure.gravatar.com; font-src 'self' https://themes.googleusercontent.com; script-src 'self' https://localhost:6984 'unsafe-eval' https://www.google-analytics.com; style-src 'self' 'unsafe-inline';" [couchdb] single_node=true