Update content security policy

aliofye · Jan 18, 2025 · 12fa102 · 12fa102
1 parent 6c30a9f
commit 12fa102
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/docker/caddy/Caddyfile b/docker/caddy/Caddyfile
@@ -37,7 +37,7 @@
 	# Add security headers
 	header {
 		Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
-		Content-Security-Policy "default-src 'self'; font-src 'self' https://cdn.jsdelivr.net; style-src 'self' https://cdn.jsdelivr.net 'unsafe-inline'; script-src 'self' https://cdn.jsdelivr.net https://*.posthog.com; script-src-elem 'self' 'unsafe-inline'; connect-src 'self' https://*.posthog.com; worker-src 'self' blob:; img-src 'self' data:;"
+		Content-Security-Policy "default-src 'self'; font-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self'; script-src-elem 'self' 'unsafe-inline'; connect-src 'self'; worker-src 'self' blob:; img-src 'self' data:;"
 		Referrer-Policy "strict-origin-when-cross-origin"
 		X-Content-Type-Options "nosniff"
 		X-Frame-Options "DENY"