CSP-Flag

2026-03-01 11:45:20 +01:00
parent 58a10625c3
commit aafc95a551
6 changed files with 13 additions and 2 deletions
--- a/README.md
+++ b/README.md
@@ -67,6 +67,7 @@ Then open [http://localhost:8080](http://localhost:8080).
 - `SESSION_TTL` (default `30m`)
 - `MAX_UPLOAD_SIZE` (bytes, default `5242880`)
 - `COOKIE_SECURE` (`true`/`false`, default `true`)
+- `APP_CSP_ENABLED` (`true`/`false`, default `true`) - disable when CSP is enforced by reverse proxy
 - `GIT_ALLOWED_HOSTS` (CSV allowlist, default `github.com,gitlab.com,bitbucket.org`)
 - `LOG_LEVEL` (default `info`)