fix: enhance CSP rule (#392)

imbajin · web-flow · commit e4b928f13f68 · 2025-02-14T15:58:29.000+08:00
diff --git a/themes/docsy/layouts/_default/baseof.html b/themes/docsy/layouts/_default/baseof.html
@@ -3,9 +3,8 @@
   <head>
       <!-- To handle CSP policy -->
       <meta http-equiv="Content-Security-Policy"
-            content="default-src 'self';
-                    style-src 'self' 'unsafe-inline' https://code.jquery.com https://cdn.jsdelivr.net;
-                    script-src 'self' https://code.jquery.com https://cdn.jsdelivr.net;
+            content="script-src 'self' 'unsafe-inline' 'unsafe-eval' https://code.jquery.com https://cdn.jsdelivr.net https://fonts.googleapis.com/;
+                    style-src 'self' 'unsafe-inline' https://code.jquery.com https://cdn.jsdelivr.net https://fonts.googleapis.com/;
                     font-src 'self' https://cdn.jsdelivr.net;
                     img-src 'self' data:">
     {{ partial "head.html" . }}
