Add connect-src entry for *.safing.io

This commit is contained in:
Patrick Pacher 2021-08-24 12:04:46 +02:00
parent 49c21c83f8
commit b5e6e67e49

View file

@ -143,6 +143,7 @@ func (mh *mainHandler) handle(w http.ResponseWriter, r *http.Request) error {
w.Header().Set(
"Content-Security-Policy",
"default-src 'self'; "+
"connect-src https://*.safing.io 'self'; "+
"style-src 'self' 'unsafe-inline'; "+
"img-src 'self' data:",
)