aboutsummaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authornodiscc <nodiscc@gmail.com>2015-11-30 23:17:01 +0100
committernodiscc <nodiscc@gmail.com>2015-11-30 23:17:01 +0100
commit8025c63906eab4091b75ec0beac06b3a5837d31b (patch)
tree95a13163e0d932ad40c2a9006c06f4bacb46b025
parenta33c574461cd082588b11b8843fe8fd7f92e3fe6 (diff)
downloadShaarli-8025c63906eab4091b75ec0beac06b3a5837d31b.tar.gz
Shaarli-8025c63906eab4091b75ec0beac06b3a5837d31b.tar.zst
Shaarli-8025c63906eab4091b75ec0beac06b3a5837d31b.zip
[doc] add apache2 CSP config
-rw-r--r--plugins/playvideos/README.md10
1 files changed, 9 insertions, 1 deletions
diff --git a/plugins/playvideos/README.md b/plugins/playvideos/README.md
index 54729e0b..b1698470 100644
--- a/plugins/playvideos/README.md
+++ b/plugins/playvideos/README.md
@@ -14,8 +14,16 @@ This is a default Shaarli plugin, you just have to enable it. See https://github
14#### Troubleshooting 14#### Troubleshooting
15 15
16If your server has [Content Security Policy](http://content-security-policy.com/) headers enabled, this may prevent the script from loading fully. You should relax the CSP in your server settings. Example CSP rule for apache2: 16If your server has [Content Security Policy](http://content-security-policy.com/) headers enabled, this may prevent the script from loading fully. You should relax the CSP in your server settings. Example CSP rule for apache2:
17`Header set Content-Security-Policy "script-src 'self' 'unsafe-inline' https://www.youtube.com https://s.ytimg.com 'unsafe-eval'"`
18 17
18In `/etc/apache2/conf-available/shaarli-csp.conf`:
19
20```apache
21<Directory /path/to/shaarli>
22 Header set Content-Security-Policy "script-src 'self' 'unsafe-inline' https://www.youtube.com https://s.ytimg.com 'unsafe-eval'"
23</Directory>
24```
25
26Then run `a2enconf shaarli-csp; service apache2 reload`
19 27
20### License 28### License
21``` 29```