Merge branch 'master' of git.fsmpi.rwth-aachen.de:infra/ansible-shared/webservices

webserver/templates/site-security

@@ -50,7 +50,7 @@
     add_header Content-Security-Policy "object-src 'none'; default-src 'self'; frame-ancestors 'none'; block-all-mixed-content" {{always}};
     add_header X-Frame-Options "DENY" {{always}};
 {% elif server.csp is defined %}
-    {% set x=server.csp.__setitem__("object-src", "none") %}
+    {% set x=server.csp.__setitem__("object-src", "'none'") %}
     {% if 'frame-ancestors' in server.csp %}
         {% if server.csp['frame-ancestors'] == 'self' %}
             add_header X-Frame-Options "SAMEORIGIN" {{always}};
@@ -59,7 +59,7 @@
         {% endif %}
     {% else %}
         add_header X-Frame-Options "DENY" {{always}};
-        {% set x=server.csp.__setitem__("frame-ancestors", "none") %}
+        {% set x=server.csp.__setitem__("frame-ancestors", "'none'") %}
     {% endif %}
     {% set directives = [] %}
     {% for key, value in server.csp.items() %}