From 23ce01cfeb61929c65c4244d0c22f5400f588c39 Mon Sep 17 00:00:00 2001
From: xHyroM <generalkubo@gmail.com>
Date: Mon, 2 Jan 2023 22:38:22 +0100
Subject: [PATCH] fix: add script-src & object-src

---
 src/layouts/Layout.astro | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/layouts/Layout.astro b/src/layouts/Layout.astro
index 83f114a..9470414 100644
--- a/src/layouts/Layout.astro
+++ b/src/layouts/Layout.astro
@@ -37,7 +37,7 @@
         />
 
         <!-- CSP -->
-        <meta http-equiv="Content-Security-Policy" content="img-src 'self'; font-src *; style-src 'self' 'unsafe-inline' fonts.googleapis.com" />
+        <meta http-equiv="Content-Security-Policy" content="img-src 'self'; font-src *; style-src 'self' 'unsafe-inline' fonts.googleapis.com; script-src 'self'; object-src 'none'" />
 
         <link rel="preconnect" href="https://fonts.googleapis.com" />
         <link