From 0ecf88e51f2630ce82b1aa61dabf0eb8303870e4 Mon Sep 17 00:00:00 2001
From: Eduard Tihomirov <tikhomirov@micord.ru>
Date: Thu, 30 Jan 2025 15:27:12 +0300
Subject: [PATCH] Merge branch 'feature/SUPPORT-8783_landing' into hotfix/1.9.8

---
 config/nginx.conf           | 4 ++--
 frontend/index.webpack.html | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/config/nginx.conf b/config/nginx.conf
index 6ea0027..511895d 100644
--- a/config/nginx.conf
+++ b/config/nginx.conf
@@ -81,7 +81,7 @@ http {
          	index index.html;
           	try_files $uri @index;
 
-			add_header Content-Security-Policy "frame-ancestors 'none'; default-src 'self'; connect-src 'self' https:; script-src 'self'; style-src 'unsafe-inline' 'self' data:; font-src 'self' data:; img-src 'self' data:;";
+			add_header Content-Security-Policy "frame-ancestors 'none'; default-src 'self'; connect-src 'self' https://www.sberbank.ru; script-src 'self'; style-src 'unsafe-inline' 'self' data:; font-src 'self' data:; img-src 'self' data:;";
 
 		#Application config
 		location = /src/resources/app-config.json {
@@ -106,7 +106,7 @@ http {
 	location @index {
 		root /frontend;
     		add_header Cache-Control "no-cache";
-    		add_header Content-Security-Policy "frame-ancestors 'none'; default-src 'self'; connect-src 'self' https:; script-src 'self'; style-src 'unsafe-inline' 'self' data:; font-src 'self' data:; img-src 'self' data:;";
+    		add_header Content-Security-Policy "frame-ancestors 'none'; default-src 'self'; connect-src 'self' https://www.sberbank.ru; script-src 'self'; style-src 'unsafe-inline' 'self' data:; font-src 'self' data:; img-src 'self' data:;";
     		expires 0;
     		try_files /index.html =404;
 	}
diff --git a/frontend/index.webpack.html b/frontend/index.webpack.html
index 183b8d9..be59390 100644
--- a/frontend/index.webpack.html
+++ b/frontend/index.webpack.html
@@ -5,7 +5,7 @@
     <meta http-equiv="content-type" content="text/html; charset=UTF-8">
     <meta name="viewport" content="width=device-width, initial-scale=1">
     <meta http-equiv="Content-Security-Policy"
-          content="default-src 'self'; connect-src 'self' https:; script-src 'self'; style-src 'unsafe-inline' 'self' data:; font-src 'self' data:; img-src 'self' data:"/>
+          content="default-src 'self'; connect-src 'self' https://www.sberbank.ru; script-src 'self'; style-src 'unsafe-inline' 'self' data:; font-src 'self' data:; img-src 'self' data:"/>
     <meta name="referrer" content="strict-origin-when-cross-origin"/>
     <link rel="icon" type="image/png" href="src/resources/img/logo.png"/>
 </head>