[GH-ISSUE #1050] Strict CSP (Content Security Policy). #2205

New issue

Closed

opened 2026-02-27 12:19:12 +03:00 by kerem · 0 comments

kerem commented

2026-02-27 12:19:12 +03:00

Owner

Originally created by @uphv on GitHub (May 13, 2025).
Original GitHub issue: https://github.com/0xJacky/nginx-ui/issues/1050

Hi,

When enabling strict CSP:

Content-Security-Policy: default-src 'self' img-src 'self' script-src 'self' object-src 'none' https: wss: frame-ancestors 'self'

Nginx-UI breaks.

Nginx-UI is served via Nginx proxy location.

Might also be my mistake. Couldn't find anything in the docs.

Thanks!

Originally created by @uphv on GitHub (May 13, 2025). Original GitHub issue: https://github.com/0xJacky/nginx-ui/issues/1050 Hi, When enabling strict CSP: Content-Security-Policy: default-src 'self' img-src 'self' script-src 'self' object-src 'none' https: wss: frame-ancestors 'self' Nginx-UI breaks. Nginx-UI is served via Nginx proxy location. Might also be my mistake. Couldn't find anything in the docs. Thanks!