cf header

Author: c121914yu

public/_headers

@@ -27,4 +27,4 @@
   Referrer-Policy: strict-origin-when-cross-origin
   Permissions-Policy: camera=(), microphone=(), geolocation=()
   Cross-Origin-Opener-Policy: same-origin-allow-popups
-  Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.baidu.com hm.baidu.com track.fastgpt.cn *.feishu.cn *.cloudflareinsights.com *.rybbit.io; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: blob:; font-src 'self' data:; connect-src 'self' *.fastgpt.io *.fastgpt.cn *.sealos.io *.googletagmanager.com *.google-analytics.com *.rybbit.io; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; media-src 'self' https:;
+  Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.baidu.com hm.baidu.com track.fastgpt.cn *.feishu.cn *.cloudflareinsights.com *.rybbit.io cdn.plyr.io; style-src 'self' 'unsafe-inline' cdn.plyr.io; img-src 'self' data: https: blob:; font-src 'self' data:; connect-src 'self' *.fastgpt.io *.fastgpt.cn *.sealos.io *.googletagmanager.com *.google-analytics.com *.rybbit.io api.github.com *.vercel-insights.com cdn.plyr.io; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; media-src 'self' https: cdn.plyr.io;