ops: update content security policy

thuliteio · Jan 26, 2023 · bf67194 · bf67194
1 parent 03c4dff
commit bf67194
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/layouts/index.headers b/layouts/index.headers
@@ -2,7 +2,7 @@
   Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
   X-Content-Type-Options: nosniff
   X-XSS-Protection: 1; mode=block
-  Content-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors https://jamstackthemes.dev; manifest-src 'self' https://*.netlify.app; connect-src 'self' https://*.netlify.app https://*.algolia.net https://*.algolianet.com https://*.algolia.io https://plausible.io/api/event; font-src 'self'; form-action 'self' https://*.netlify.app; img-src 'self' https://*.netlify.app https://ad.doubleclick.net https://*.adsafeprotected.com https://*.buysellads.net data:; worker-src 'self' blob:; script-src 'self' https://*.netlify.app 'unsafe-eval' 'nonce-dXNlcj0iaGVsbG8iLGRvbWFpbj0iaGVua3ZlcmxpbmRlLmNvbSIsZG9jdW1lbnQud3JpdGUodXNlcisiQCIrZG9tYWluKTs=' https://cdn.carbonads.com/carbon.js https://srv.carbonads.net/ads/ 'sha512-RBYr6Ld4w1yVqaACrgrBLQfPgGhj/1jyacA74WxJ1KM6KVcSWymwrdDwb3HDcdpwiNJ5yssot1He0U9vXoQVlg==' 'sha256-aWZ3y/RxbBYKHXH0z8+8ljrHG1mSBvyzSfxSMjBSaXk=' 'sha256-IIKUALuoKA6KMBRN/2L8ANVutaXcSW+GqTH1dD3NPvY='; style-src 'self' https://*.netlify.app 'unsafe-inline'
+  Content-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors https://jamstackthemes.dev; manifest-src 'self' https://*.netlify.app; connect-src 'self' https://*.netlify.app https://*.algolia.net https://*.algolianet.com https://*.algolia.io https://plausible.io/api/event; font-src 'self'; form-action 'self' https://*.netlify.app; img-src 'self' https://*.netlify.app https://ad.doubleclick.net https://*.adsafeprotected.com https://*.buysellads.net https://i.giphy.com data:; worker-src 'self' blob:; script-src 'self' https://*.netlify.app 'unsafe-eval' 'nonce-dXNlcj0iaGVsbG8iLGRvbWFpbj0iaGVua3ZlcmxpbmRlLmNvbSIsZG9jdW1lbnQud3JpdGUodXNlcisiQCIrZG9tYWluKTs=' https://cdn.carbonads.com/carbon.js https://srv.carbonads.net/ads/ 'sha512-RBYr6Ld4w1yVqaACrgrBLQfPgGhj/1jyacA74WxJ1KM6KVcSWymwrdDwb3HDcdpwiNJ5yssot1He0U9vXoQVlg==' 'sha256-aWZ3y/RxbBYKHXH0z8+8ljrHG1mSBvyzSfxSMjBSaXk=' 'sha256-IIKUALuoKA6KMBRN/2L8ANVutaXcSW+GqTH1dD3NPvY='; style-src 'self' https://*.netlify.app 'unsafe-inline'
   X-Frame-Options: SAMEORIGIN
   Referrer-Policy: strict-origin
   Feature-Policy: geolocation 'self'