bo0tzzandCodex
a93bbdf3e7
* feat: inline hashes in helmet CSP * tests * fix: svelte3 merge * chore: clean up --------- Co-authored-by: Daniel Dietzler <mail@ddietzler.dev> Co-authored-by: Jason Rasmussen <jason@rasm.me> (cherry picked from commit 02a5d4b2060dad6f5779c196b7bb2b43f871ffb2)
24 lines
657 B
JSON
24 lines
657 B
JSON
{
|
|
"contentSecurityPolicy": {
|
|
"directives": {
|
|
"default-src": ["'self'"],
|
|
"script-src": ["'self'", "'wasm-unsafe-eval'", "https://www.gstatic.com"],
|
|
"style-src": ["'self'"],
|
|
"style-src-attr": ["'unsafe-inline'"],
|
|
"img-src": ["'self'", "data:", "blob:"],
|
|
"media-src": ["'self'", "data:", "blob:"],
|
|
"connect-src": [
|
|
"'self'",
|
|
"blob:",
|
|
"https://pay.futo.org",
|
|
"https://static.immich.cloud",
|
|
"https://tiles.immich.cloud"
|
|
],
|
|
"worker-src": ["'self'", "blob:"],
|
|
"frame-src": ["'none'"],
|
|
"object-src": ["'none'"],
|
|
"base-uri": ["'self'"]
|
|
}
|
|
}
|
|
}
|