fix: broaden CSP for CartoDB tile subdomains and Leaflet marker icons
This commit is contained in:
@@ -7,7 +7,7 @@ const cspDirectives = [
|
|||||||
"script-src 'self' 'unsafe-inline'",
|
"script-src 'self' 'unsafe-inline'",
|
||||||
"style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://unpkg.com",
|
"style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://unpkg.com",
|
||||||
"font-src 'self' https://fonts.gstatic.com",
|
"font-src 'self' https://fonts.gstatic.com",
|
||||||
"img-src 'self' data: https://*.basemaps.cartocdn.com",
|
"img-src 'self' data: https://*.basemaps.cartocdn.com https://a.basemaps.cartocdn.com https://b.basemaps.cartocdn.com https://c.basemaps.cartocdn.com https://d.basemaps.cartocdn.com https://unpkg.com",
|
||||||
"connect-src 'self'",
|
"connect-src 'self'",
|
||||||
"frame-ancestors 'none'",
|
"frame-ancestors 'none'",
|
||||||
"base-uri 'self'",
|
"base-uri 'self'",
|
||||||
|
|||||||
Reference in New Issue
Block a user