Files
EnvelopeGenerator/EnvelopeGenerator.Web/appsettings.Security.json
TekH d02149cb6b Update AllowedOrigins to use localhost:8080 instead of 7202
Replaced "https://localhost:7202" with "http://localhost:8080" in the AllowedOrigins setting. "https://digitale.unterschrift.wisag.de/" remains unchanged. This updates the allowed local development origin.
2026-03-11 12:44:23 +01:00

17 lines
713 B
JSON

{
"Content-Security-Policy": [ // The first format parameter {0} will be replaced by the nonce value.
"default-src 'self'",
"script-src 'self' 'nonce-{0}' 'unsafe-eval'",
"style-src 'self' 'unsafe-inline' https://fonts.googleapis.com:*",
"img-src 'self' data: https: blob:",
"font-src 'self' https://fonts.gstatic.com:*",
"connect-src 'self' https://nominatim.openstreetmap.org:* http://localhost:* https://localhost:* ws://localhost:* wss://localhost:* blob:",
"frame-src 'self'",
"media-src 'self'",
"object-src 'self'"
],
"AllowedOrigins": [ "http://localhost:8080", "https://digitale.unterschrift.wisag.de/" ],
"TFARegParams": {
"TimeLimit": "90.00:00:00"
}
}