Skip to content

Commit b310ed4

Browse files
committed
Reverted in memory ticket store from RC
1 parent 394baf8 commit b310ed4

File tree

2 files changed

+1
-2
lines changed

2 files changed

+1
-2
lines changed

LearningHub.Nhs.WebUI/Startup/AuthenticationConfiguration.cs

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,6 @@ public static void ConfigureAuthentication(this IServiceCollection services, Lea
4343
options.SlidingExpiration = true;
4444
options.EventsType = typeof(CookieEventHandler);
4545
options.AccessDeniedPath = "/Home/AccessDenied";
46-
options.SessionStore = new InMemoryTicketStore(new ConcurrentDictionary<string, AuthenticationTicket>());
4746
})
4847
.AddOpenIdConnect(AuthenticationScheme, options =>
4948
{

WebAPI/LearningHub.Nhs.API/Program.cs

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@
4040

4141
app.Use(async (context, next) =>
4242
{
43-
context.Response.Headers.Add("content-security-policy", "object-src 'none'; frame-ancestors 'none'; base-uri 'self';");
43+
context.Response.Headers.Add("content-security-policy", "object-src 'none'; frame-ancestors 'none'; sandbox allow-forms allow-same-origin allow-scripts allow-popups; base-uri 'self';");
4444
context.Response.Headers.Add("Referrer-Policy", "no-referrer");
4545
context.Response.Headers.Add("Strict-Transport-Security", "max-age=31536000; includeSubDomains");
4646
context.Response.Headers.Add("X-Content-Type-Options", "nosniff");

0 commit comments

Comments
 (0)