Add style-src: unsafe-inline
parent
af56b65ab9
commit
73377830c9
|
@ -33,9 +33,10 @@ http://static-mat-services.fly.dev/ {
|
||||||
# keep referrer data off of HTTP connections
|
# keep referrer data off of HTTP connections
|
||||||
Referrer-Policy strict-origin-when-cross-origin
|
Referrer-Policy strict-origin-when-cross-origin
|
||||||
# content security policy
|
# content security policy
|
||||||
|
# style-src: 'unsafe-inline' is currently enabled for syntax highlighting in codefences
|
||||||
Content-Security-Policy "default-src 'none';
|
Content-Security-Policy "default-src 'none';
|
||||||
img-src 'self';
|
img-src 'self';
|
||||||
style-src 'self' https://cdn.jsdelivr.net/;
|
style-src 'self' https://cdn.jsdelivr.net/ 'unsafe-inline';
|
||||||
font-src 'self' https://cdn.jsdelivr.net/;
|
font-src 'self' https://cdn.jsdelivr.net/;
|
||||||
frame-ancestors 'none';
|
frame-ancestors 'none';
|
||||||
base-uri 'none';
|
base-uri 'none';
|
||||||
|
|
Loading…
Reference in New Issue