fix CSP typo

chanzuckerberg · Mar 26, 2021 · cdd2557 · cdd2557
1 parent 1b39ccd
commit cdd2557
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/frontend/next.config.js b/frontend/next.config.js
@@ -18,19 +18,19 @@ module.exports = withImages({
         headers: createSecureHeaders({
           contentSecurityPolicy: {
             directives: {
-              baseUri: "self",
+              baseUri: "'self'",
               connectSrc: [
                 "'self'",
                 "sentry.prod.si.czi.technology",
                 configs.API_URL,
               ],
               defaultSrc: ["'self'"],
               fontSrc: ["'self'", "https://fonts.gstatic.com"],
-              formAction: "self",
+              formAction: "'self'",
               frameAncestors: ["'none'"],
               imgSrc: ["'self'", "data:"],
-              mediaSrc: ["self"],
-              manifestSrc: ["self"],
+              mediaSrc: ["'self'"],
+              manifestSrc: ["'self'"],
               objectSrc: ["'none'"],
               reportURI:
                 configs.SENTRY_DEPLOYMENT_ENVIRONMENT &&