This is an automated email from the ASF dual-hosted git repository.
asf-gitbox-commits pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/allura.git
The following commit(s) were added to refs/heads/master by this push:
new 1f9e0deb8 [#11526] form-action from self to base_url
1f9e0deb8 is described below
commit 1f9e0deb8817ac3e3558bafddc77363688f098b9
Author: Daniel Castillo <[email protected]>
AuthorDate: Tue May 12 16:58:36 2026 +0000
[#11526] form-action from self to base_url
---
Allura/development.ini | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/Allura/development.ini b/Allura/development.ini
index 4cdaabeaa..3193b5331 100644
--- a/Allura/development.ini
+++ b/Allura/development.ini
@@ -77,6 +77,7 @@ site_name = Allura
; Change these to your website's domain
domain = localhost
; Change this to your website's full URL
+; Make sure the csp.form_action_url match to the base_url
base_url = http://localhost:8080
; Change this to configure your image path and redirect link
@@ -745,7 +746,7 @@ csp.frame_sources = 'self' www.youtube-nocookie.com
; csp.form_actions_enforce = true
; form-action valid sources that can be used as an HTML <form> action
-csp.form_action_urls = 'self'
+csp.form_action_urls = http://localhost:8080
; to enable enforce mode on script-src
; csp.script_src_enforce = true
