(allura) branch master updated: [#11526] form-action from self to base_url

[cc...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

asf-gitbox-commits pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/allura.git


The following commit(s) were added to refs/heads/master by this push:
     new 1f9e0deb8 [#11526] form-action from self to base_url
1f9e0deb8 is described below

commit 1f9e0deb8817ac3e3558bafddc77363688f098b9
Author: Daniel Castillo <da...@slashdotmedia.com>
AuthorDate: Tue May 12 16:58:36 2026 +0000

    [#11526] form-action from self to base_url
---
 Allura/development.ini | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/Allura/development.ini b/Allura/development.ini
index 4cdaabeaa..3193b5331 100644
--- a/Allura/development.ini
+++ b/Allura/development.ini
@@ -77,6 +77,7 @@ site_name = Allura
 ; Change these to your website's domain
 domain = localhost
 ; Change this to your website's full URL
+; Make sure the csp.form_action_url match to the base_url
 base_url = http://localhost:8080
 
 ; Change this to configure your image path and redirect link
@@ -745,7 +746,7 @@ csp.frame_sources = 'self' www.youtube-nocookie.com
 ; csp.form_actions_enforce = true
 
 ; form-action valid sources that can be used as an HTML <form> action
-csp.form_action_urls = 'self'
+csp.form_action_urls = http://localhost:8080
 
 ; to enable enforce mode on script-src
 ; csp.script_src_enforce = true