This is an automated email from the ASF dual-hosted git repository. asf-gitbox-commits pushed a commit to branch dc/SF-11526 in repository https://gitbox.apache.org/repos/asf/allura.git
commit 6a886d5dc09237fe3c6c23195fa09d135c9e6914 Author: Daniel Castillo <[email protected]> AuthorDate: Tue May 12 16:58:36 2026 +0000 [#11526] form-action from self to base_url --- Allura/development.ini | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/Allura/development.ini b/Allura/development.ini index a0671e232..6bb757f10 100644 --- a/Allura/development.ini +++ b/Allura/development.ini @@ -77,6 +77,7 @@ site_name = Allura ; Change these to your website's domain domain = localhost ; Change this to your website's full URL +; Make sure the csp.form_action_url match to the base_url base_url = http://localhost:8080 ; Change this to configure your image path and redirect link @@ -744,7 +745,7 @@ csp.frame_sources = 'self' www.youtube-nocookie.com ; csp.form_actions_enforce = true ; form-action valid sources that can be used as an HTML <form> action -csp.form_action_urls = 'self' +csp.form_action_urls = http://localhost:8080 ; to enable enforce mode on script-src ; csp.script_src_enforce = true
