From 358c2d97427695cd2235f9cc57a8114a29b01ab1 Mon Sep 17 00:00:00 2001 From: Collin Barrett Date: Fri, 14 Jun 2024 15:19:50 -0500 Subject: [PATCH] =?UTF-8?q?refactor(web):=20=E2=99=BB=EF=B8=8F=F0=9F=94=90?= =?UTF-8?q?=20loosen=20csp?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- web/staticwebapp.config.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/web/staticwebapp.config.json b/web/staticwebapp.config.json index 7356a53d9..fa8ee0497 100644 --- a/web/staticwebapp.config.json +++ b/web/staticwebapp.config.json @@ -4,7 +4,7 @@ }, "trailingSlash": "never", "globalHeaders": { - "Content-Security-Policy": "upgrade-insecure-requests; default-src 'none'; base-uri 'none'; frame-ancestors 'none'; form-action 'none'; connect-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; manifest-src 'self';", + "Content-Security-Policy": "upgrade-insecure-requests; default-src 'none'; base-uri 'none'; frame-ancestors 'none'; form-action 'none'; connect-src 'self' https://api.filterlists.com; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; manifest-src 'self';", "Permissions-Policy": "accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), bluetooth=(), browsing-topics=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), speaker-selection=(), usb=(), web-share=(), xr-spatial-tracking=()" } } \ No newline at end of file