mirrors/cobalt
1
0
Fork 0
mirror of https://github.com/imputnet/cobalt.git synced 2024-12-29 11:06:10 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

web/headers: update csp yet again

Browse source 
whatever dude
This commit is contained in:
wukko 2024-09-18 19:16:23 +06:00
parent 9024418aff
commit 52599dd900
No known key found for this signature in database
GPG key ID: 3E30B3F26C7B4AA2
1 changed files with 1 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
web/src/routes/_headers/+server.ts
View file

@ -9,15 +9,7 @@ const allowedScriptOrigins = [
export async function GET() { export async function GET() {
const CSP = { const CSP = {
"connect-src": ["*"], "connect-src": ["*"],
"default-src": ["'none'"], "default-src": ["'self'"],
"font-src": ["'self'"],
"style-src": ["'self'"],
"style-src-attr": ["'self'"],
"style-src-elem": ["'self'"],
"img-src": ["'self'", "data:"],
"manifest-src": ["'self'"],
"worker-src": ["'self'"],
"script-src": allowedScriptOrigins, "script-src": allowedScriptOrigins,
"script-src-attr": allowedScriptOrigins, "script-src-attr": allowedScriptOrigins,