05/06 admin login css issues
This commit is contained in:
@@ -16,8 +16,8 @@ def create_admin_app(config_override=None):
|
|||||||
flask_app = Flask(
|
flask_app = Flask(
|
||||||
__name__,
|
__name__,
|
||||||
template_folder="../templates",
|
template_folder="../templates",
|
||||||
static_folder="../static",
|
static_folder="../static/admin",
|
||||||
static_url_path="/static/admin",
|
static_url_path="/static",
|
||||||
)
|
)
|
||||||
|
|
||||||
# ── Config ────────────────────────────────────────────────
|
# ── Config ────────────────────────────────────────────────
|
||||||
|
|||||||
+3
-2
@@ -34,8 +34,9 @@ def apply_security_headers(app):
|
|||||||
# Basic CSP — tightened further in Nginx for production
|
# Basic CSP — tightened further in Nginx for production
|
||||||
response.headers["Content-Security-Policy"] = (
|
response.headers["Content-Security-Policy"] = (
|
||||||
"default-src 'self'; "
|
"default-src 'self'; "
|
||||||
"script-src 'self'; "
|
"script-src 'self' https://cdn.jsdelivr.net; "
|
||||||
"style-src 'self' 'unsafe-inline'; "
|
"style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; "
|
||||||
|
"font-src 'self' https://cdn.jsdelivr.net; "
|
||||||
"img-src 'self' data:; "
|
"img-src 'self' data:; "
|
||||||
"frame-ancestors 'none';"
|
"frame-ancestors 'none';"
|
||||||
)
|
)
|
||||||
|
|||||||
@@ -21,8 +21,8 @@ def create_tenant_app(config_override=None):
|
|||||||
flask_app = Flask(
|
flask_app = Flask(
|
||||||
__name__,
|
__name__,
|
||||||
template_folder="../templates",
|
template_folder="../templates",
|
||||||
static_folder="../static",
|
static_folder="../static/tenant",
|
||||||
static_url_path="/static/tenant",
|
static_url_path="/static",
|
||||||
)
|
)
|
||||||
|
|
||||||
# ── Config ────────────────────────────────────────────────
|
# ── Config ────────────────────────────────────────────────
|
||||||
|
|||||||
Reference in New Issue
Block a user