fix: add script-src & object-src

This commit is contained in:
xHyroM 2023-01-02 22:38:22 +01:00
parent 86aa96b86f
commit 23ce01cfeb

View file

@ -37,7 +37,7 @@
/>
<!-- CSP -->
<meta http-equiv="Content-Security-Policy" content="img-src 'self'; font-src *; style-src 'self' 'unsafe-inline' fonts.googleapis.com" />
<meta http-equiv="Content-Security-Policy" content="img-src 'self'; font-src *; style-src 'self' 'unsafe-inline' fonts.googleapis.com; script-src 'self'; object-src 'none'" />
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link