vrr/DockFlare
2
0
Fork 0
mirror of https://github.com/ChrispyBacon-dev/DockFlare.git synced 2026-04-28 03:39:32 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

CSP exception for rsme
Some checks are pending
Docker Image Build and Push / build (push) Waiting to run
Details

Browse source
This commit is contained in:
ChrispyBacon-dev 2025-08-07 17:34:24 +02:00
parent b197382cca
commit f61fc7e5ff
1 changed files with 6 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

9
dockflare/app/web/routes.py
View file

@ -115,10 +115,13 @@ def add_security_headers_bp(response):
csp = {
"default-src": ["'self'"],
"script-src": ["'self'"],
"style-src": ["'self'", "'unsafe-inline'"],
# Allow inline scripts for onclick handlers to work
"script-src": ["'self'", "'unsafe-inline'"],
# Allow styles from rsms.me for the Inter font
"style-src": ["'self'", "'unsafe-inline'", "https://rsms.me"],
"img-src": ["'self'", "data:"],
"font-src": ["'self'"],
# Allow fonts from rsms.me
"font-src": ["'self'", "https://rsms.me"],
"connect-src": ["'self'"],
"frame-src": ["'none'"]
}