pen/docent
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

update csp

Browse source
This commit is contained in:
Pen Anderson 2026-05-26 15:13:44 -05:00
parent f335f789fd
commit c74c63ebd7
1 changed files with 14 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

15
web/svelte.config.js
View file

@ -17,7 +17,20 @@ export default {
csp: {
mode: 'hash',
directives: {
'script-src': ['self']
'default-src': ['self'],
'script-src': ['self'],
'style-src': ['self', 'unsafe-inline'],
'img-src': ['self', 'data:', 'blob:'],
'media-src': ['self', 'blob:'],
'font-src': ['self', 'data:'],
'connect-src': ['self'],
'manifest-src': ['self'],
'worker-src': ['self'],
'object-src': ['none'],
'base-uri': ['self'],
'frame-ancestors': ['none'],
'form-action': ['self'],
'upgrade-insecure-requests': true
}
},
alias: {