mirror of
https://github.com/xHyroM/website.git
synced 2024-11-22 15:01:05 +01:00
fix: add 'unsafe-inline' to script-src
This commit is contained in:
parent
332458b14f
commit
90edaee257
2 changed files with 2 additions and 2 deletions
|
@ -37,7 +37,7 @@
|
||||||
/>
|
/>
|
||||||
|
|
||||||
<!-- CSP -->
|
<!-- CSP -->
|
||||||
<meta http-equiv="Content-Security-Policy" content="img-src 'self'; font-src *; style-src 'self' 'unsafe-inline' fonts.googleapis.com; script-src 'self'; object-src 'none'" />
|
<meta http-equiv="Content-Security-Policy" content="img-src 'self'; font-src *; style-src 'self' 'unsafe-inline' fonts.googleapis.com; script-src 'self' 'unsafe-inline'; object-src 'none'" />
|
||||||
|
|
||||||
<link rel="preconnect" href="https://fonts.googleapis.com" />
|
<link rel="preconnect" href="https://fonts.googleapis.com" />
|
||||||
<link
|
<link
|
||||||
|
|
|
@ -5,7 +5,7 @@
|
||||||
"headers" : [
|
"headers" : [
|
||||||
{
|
{
|
||||||
"key" : "Content-Security-Policy",
|
"key" : "Content-Security-Policy",
|
||||||
"value" : "img-src 'self'; font-src *; style-src 'self' 'unsafe-inline' fonts.googleapis.com; script-src 'self'; object-src 'none'"
|
"value" : "img-src 'self'; font-src *; style-src 'self' 'unsafe-inline' fonts.googleapis.com; script-src 'self' 'unsafe-inline'; object-src 'none'"
|
||||||
}
|
}
|
||||||
]
|
]
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in a new issue