From b1886583d94bd1e4b89121cc305e20e4b9095d21 Mon Sep 17 00:00:00 2001
From: strawberry <strawberry@puppygock.gay>
Date: Thu, 30 May 2024 23:14:35 -0400
Subject: [PATCH] csp: fix typo, add base-uri none

Signed-off-by: strawberry <strawberry@puppygock.gay>
---
 src/router/layers.rs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/router/layers.rs b/src/router/layers.rs
index 33d0cb20..2b1eaca6 100644
--- a/src/router/layers.rs
+++ b/src/router/layers.rs
@@ -66,7 +66,7 @@ pub(crate) fn build(server: &Arc<Server>) -> io::Result<axum::routing::IntoMakeS
 			header::CONTENT_SECURITY_POLICY,
 			HeaderValue::from_static(
 				"sandbox; default-src 'none'; font-src 'none'; script-src 'none'; plugin-types application/pdf; \
-				 style-src 'unsafe-inline'; object-src 'self'; frame-ancesors 'none';",
+				 style-src 'unsafe-inline'; object-src 'self'; frame-ancestors 'none'; base-uri 'none';",
 			),
 		))
 		.layer(cors_layer(server))