update changeset to document how to keep the existing behavior

Signed-off-by: Himanshu Mishra <himanshu@orkohunter.net>
2021-06-07 16:18:06 +02:00
parent efef396113
commit 0c3af8bf84
1 changed files with 8 additions and 0 deletions
@@ -11,3 +11,11 @@ backend:
  csp:
 -    upgrade-insecure-requests: false
 ```
+
+But if you want to keep the existing behavior of `upgrade-insecure-requests` Content-Security-Policy being enabled, make the following change in your `app-config.yaml`. You can read more the CSP here https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/upgrade-insecure-requests
+
+```diff
+backend:
+  csp:
+    upgrade-insecure-requests: []
+```