We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent ca27e97 commit ea75ea5Copy full SHA for ea75ea5
1 file changed
next.config.js
@@ -5,13 +5,13 @@ const withBundleAnalyzer = require('@next/bundle-analyzer')({
5
6
const ContentSecurityPolicy = `
7
default-src 'self';
8
- script-src 'self' 'unsafe-eval' 'unsafe-inline' giscus.app analytics.umami.is;
9
- style-src 'self' 'unsafe-inline';
+ script-src 'self' 'unsafe-eval' 'unsafe-inline' giscus.app analytics.umami.is cloud.umami.is;
+ style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;
10
img-src * blob: data:;
11
media-src 'self' *.s3.amazonaws.com;
12
connect-src *;
13
- font-src 'self';
14
- frame-src giscus.app
+ font-src 'self' data: https://fonts.gstatic.com;
+ frame-src giscus.app;
15
`
16
17
const securityHeaders = [
0 commit comments