From 1c82e661e04e0979e09e487a58a801ffa9f438e8 Mon Sep 17 00:00:00 2001
From: Christian Breunig <christian@breunig.cc>
Date: Sat, 16 Dec 2023 08:35:23 +0100
Subject: ocserv: T5796: add smoketest for new "http-security-headers" feature
---
data/templates/ocserv/ocserv_config.j2 | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
(limited to 'data')
diff --git a/data/templates/ocserv/ocserv_config.j2 b/data/templates/ocserv/ocserv_config.j2
index 713ca7fd4..b5e890c32 100644
--- a/data/templates/ocserv/ocserv_config.j2
+++ b/data/templates/ocserv/ocserv_config.j2
@@ -126,7 +126,7 @@ select-group = {{ grp }}
included-http-headers = Strict-Transport-Security: max-age=31536000 ; includeSubDomains
included-http-headers = X-Frame-Options: deny
included-http-headers = X-Content-Type-Options: nosniff
-included-http-headers = Content-Security-Policy: default-src 'none'
+included-http-headers = Content-Security-Policy: default-src "none"
included-http-headers = X-Permitted-Cross-Domain-Policies: none
included-http-headers = Referrer-Policy: no-referrer
included-http-headers = Clear-Site-Data: "cache","cookies","storage"
--
cgit v1.2.3