better CSP

kawalcovid19/wargabantuwarga.com#653 (comment)
phdd · Jun 7, 2023 · 2a4becb · 2a4becb
1 parent b93725d
commit 2a4becb
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/netlify.toml b/netlify.toml
@@ -55,4 +55,4 @@ X-Frame-Options = "DENY"
 X-XSS-Protection = "1; mode=block"
 X-Content-Type-Options = "nosniff"
 Referrer-Policy = "no-referrer"
-# Content-Security-Policy = "script-src 'self' 'unsafe-inline'"
+Content-Security-Policy = "default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' *.netlify.com unpkg.com ; img-src 'self' blob: data: https:; frame-ancestors 'none'; "