(fix): include data and urls

fern-api · Aug 1, 2024 · d597f02 · d597f02
1 parent c0c793f
commit d597f02
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/packages/ui/docs-bundle/next.config.js b/packages/ui/docs-bundle/next.config.js
@@ -78,6 +78,8 @@ const nextConfig = {
 
         const styleSrc = ["'self'", "'unsafe-inline'"];
 
+        const fontSrc = ["'self'", "data:", ...DOCS_FILES_URLS];
+
         if (cdnUri != null) {
             scriptSrc.push(`${cdnUri.origin}`);
             connectSrc.push(`${cdnUri.origin}`);
@@ -102,6 +104,7 @@ const nextConfig = {
             "base-uri 'self'",
             "form-action 'self'",
             "frame-ancestors 'none'",
+            `font-src ${fontSrc.join(" ")}`,
             // "upgrade-insecure-requests", <-- this is ignored because Report-Only mode is enabled
         ];