Strengthen CSP

This commit is contained in:
ramki-bruno
2025-02-12 20:48:19 +05:30
parent 31c11830a6
commit f53afb5a6b

View File

@@ -30,8 +30,7 @@ const lastOpenedCollections = new LastOpenedCollections();
// Reference: https://content-security-policy.com/
const contentSecurityPolicy = [
"default-src 'self'",
"script-src * 'unsafe-inline' 'unsafe-eval'",
"connect-src * 'unsafe-inline'",
"connect-src 'self' https://*.posthog.com",
"font-src 'self' https:",
// this has been commented out to make oauth2 work
// "form-action 'none'",