From 2f18bda0de5f3ba1d75d601fcc536515995a4327 Mon Sep 17 00:00:00 2001
From: tdro <tdro@noreply.example.com>
Date: Thu, 6 Oct 2022 16:53:02 -0400
Subject: config: Add base-uri content security

See previous commit for configuration change.
---
 config.json                                    | 3 +++
 config.toml                                    | 1 +
 config.yaml                                    | 1 +
 themes/default/layouts/shortcodes/version.html | 2 +-
 4 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/config.json b/config.json
index 43ec38f..8959411 100644
--- a/config.json
+++ b/config.json
@@ -108,6 +108,9 @@
     },
     "csp": {
       "block-all-mixed-content": "",
+      "base-uri": [
+        "'self'"
+      ],
       "child-src": [
         "'self'"
       ],
diff --git a/config.toml b/config.toml
index 6b6fdcd..84b6aad 100644
--- a/config.toml
+++ b/config.toml
@@ -101,6 +101,7 @@ enableRobotsTXT = true
 
   [params.csp]
     block-all-mixed-content = ""
+    base-uri = ["'self'"]
     child-src = ["'self'"]
     connect-src = ["'self'"]
     default-src = ["'self'"]
diff --git a/config.yaml b/config.yaml
index d135044..1688d90 100644
--- a/config.yaml
+++ b/config.yaml
@@ -89,6 +89,7 @@ params:
     logo: data/media/logo.png
   csp:
     block-all-mixed-content: ''
+    base-uri: ["'self'"]
     child-src: ["'self'"]
     connect-src: ["'self'"]
     default-src: ["'self'"]
diff --git a/themes/default/layouts/shortcodes/version.html b/themes/default/layouts/shortcodes/version.html
index 482f0fb..cfe938d 100644
--- a/themes/default/layouts/shortcodes/version.html
+++ b/themes/default/layouts/shortcodes/version.html
@@ -1,4 +1,4 @@
-{{- $version := "0.11.1" -}}
+{{- $version := "0.11.2" -}}
 {{- $number := default false (.Get "number" | default (.Get 0)) -}}
 {{- $clone  := default false (.Get "clone"  | default (.Get 1)) -}}
 
-- 
cgit v1.2.3