diff options
| author | Serghei Iakovlev <egrep@protonmail.ch> | 2022-07-24 20:30:17 +0200 |
|---|---|---|
| committer | Serghei Iakovlev <egrep@protonmail.ch> | 2022-07-24 20:30:17 +0200 |
| commit | 6d7e4baaee72d660c18022ca0fb7aef8c03235f9 (patch) | |
| tree | 404ee766cea1cb1d44214bc0176e0a10ee5bb459 /netlify.toml | |
| parent | 18e632aa19f49c1c5750e44d028182dbe18de0b2 (diff) | |
| download | gohugo-theme-ed-6d7e4baaee72d660c18022ca0fb7aef8c03235f9.tar.gz | |
Correct CSP header
Diffstat (limited to 'netlify.toml')
| -rw-r--r-- | netlify.toml | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/netlify.toml b/netlify.toml index 8edb56f..f3b429b 100644 --- a/netlify.toml +++ b/netlify.toml @@ -89,11 +89,11 @@ # (including inline scripts and event-handling HTML attributes). Content-Security-Policy = """ default-src 'self'; - script-src 'self' www.googletagmanager.com; + script-src 'self' www.googletagmanager.com hypothes.is; style-src 'self'; - img-src 'self' data: www.google-analytics.com www.googletagmanager.com www.gstatic.com stats.g.doubleclick.net; + img-src 'self' data: *.google-analytics.com www.googletagmanager.com www.gstatic.com stats.g.doubleclick.net; font-src 'self'; - connect-src 'self' www.google-analytics.com analytics.google.com www.googletagmanager.com stats.g.doubleclick.net; + connect-src 'self' *.google-analytics.com analytics.google.com www.googletagmanager.com stats.g.doubleclick.net; media-src 'self'; object-src 'self'; frame-src 'none'; |