diff --git a/files/templates/errors/WPD/502.html b/files/templates/errors/WPD/502.html
index c6cdd0072..d7d5d8bfa 100644
--- a/files/templates/errors/WPD/502.html
+++ b/files/templates/errors/WPD/502.html
@@ -3,8 +3,6 @@
-
-
diff --git a/files/templates/errors/rDrama/502.html b/files/templates/errors/rDrama/502.html
index 62283693b..c15b2ea48 100644
--- a/files/templates/errors/rDrama/502.html
+++ b/files/templates/errors/rDrama/502.html
@@ -3,8 +3,6 @@
-
-
diff --git a/nginx-serve-static.conf b/nginx-serve-static.conf
index 2ac479d00..1ad6afc5a 100644
--- a/nginx-serve-static.conf
+++ b/nginx-serve-static.conf
@@ -1,5 +1,5 @@
include includes/headers;
-add_header Content-Security-Policy "default-src 'none';";
+add_header Content-Security-Policy "default-src 'none'; report-uri /csp_violations;";
sendfile on;
sendfile_max_chunk 1m;
tcp_nopush on;
diff --git a/nginx.conf b/nginx.conf
index 54174e61c..1e212daa3 100644
--- a/nginx.conf
+++ b/nginx.conf
@@ -5,7 +5,7 @@ server {
listen [::]:80;
proxy_set_header Host $http_host;
include includes/headers;
- add_header Content-Security-Policy "default-src 'none';";
+ add_header Content-Security-Policy "default-src 'none'; report-uri /csp_violations;";
location / {
proxy_pass http://localhost:5000/;
@@ -19,7 +19,7 @@ server {
proxy_set_header Connection "Upgrade";
proxy_pass http://localhost:5001/socket.io;
include includes/headers;
- add_header Content-Security-Policy "default-src 'none';";
+ add_header Content-Security-Policy "default-src 'none'; report-uri /csp_violations;";
}
location /chat {
proxy_pass http://localhost:5001/chat;
@@ -78,7 +78,7 @@ server {
}
location =/offline.html {
alias /rDrama/files/assets/offline.html;
- add_header Content-Security-Policy "default-src 'none'; style-src 'unsafe-inline'; img-src data:;";
+ add_header Content-Security-Policy "default-src 'none'; style-src 'unsafe-inline'; img-src data:; report-uri /csp_violations;";
}
@@ -87,5 +87,6 @@ server {
location =/502.html {
alias /rDrama/files/templates/errors/rDrama/502.html;
add_header Cache-Control "no-store";
+ add_header Content-Security-Policy "default-src 'none'; style-src 'self'; font-src 'self'; img-src 'self'; report-uri /csp_violations;";
}
}