From 12b11924d47f2148d581523359e786f8029ae448 Mon Sep 17 00:00:00 2001 From: afn Date: Wed, 9 Aug 2023 19:20:20 -0400 Subject: [PATCH] fix: update csp --- static/_headers | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/static/_headers b/static/_headers index 8ed9c85..20e17d8 100644 --- a/static/_headers +++ b/static/_headers @@ -1,11 +1,12 @@ /* X-Frame-Options: DENY X-XSS-Protection: 1; mode=block - Content-Security-Policy: default-src 'self' *.revanced.app; img-src 'self' *.revanced.app avatars.githubusercontent.com; font-src 'self' *.revanced.app fonts.googleapis.com fonts.gstatic.com; style-src 'self' 'unsafe-inline' *.revanced.app fonts.googleapis.com fonts.gstatic.com; script-src 'self' 'unsafe-inline'; + Content-Security-Policy: default-src 'self' *.revanced.app; img-src 'self' *.revanced.app avatars.githubusercontent.com data:; font-src 'self' *.revanced.app fonts.googleapis.com fonts.gstatic.com; style-src 'self' 'unsafe-inline' *.revanced.app fonts.googleapis.com fonts.gstatic.com; script-src 'self' 'unsafe-inline'; X-Content-Type-Options: nosniff Referrer-Policy: no-referrer Cache-Control: public, max-age=604800, stale-while-revalidate=86400, stale-if-error=259200 + /_app/immutable Cache-Control: public, max-age=2419200, stale-while-revalidate=345600, stale-if-error=1036800