5555

backend/src/main/java/com/jiayue/ssi/filter/InterfaceLimitFilter.java

@@ -35,7 +35,7 @@ public class InterfaceLimitFilter extends OncePerRequestFilter {
     protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain)
         throws ServletException, IOException {
         response.setHeader("Strict-Transport-Security", "max-age=63072000;includeSubDomains;preload");
-        response.setHeader("Content-Security-Policy","script-src 'self';object-src 'self';default-src 'self'");
+        response.setHeader("Content-Security-Policy","script-src 'self';object-src 'self'");
         response.setHeader("X-Content-Type-Options","nosniff");
         response.setHeader("X-XSS-Protection","1; mode=block");
         response.setHeader("X-Frame-Options","SAMEORIGIN");