Merge pull request 'Fix CSP for Google Fonts' (#40) from dev into main

This commit was merged in pull request #40.
This commit is contained in:
2026-04-17 11:16:33 +00:00
+5 -2
View File
@@ -145,8 +145,11 @@ def create_app() -> Quart:
"Content-Security-Policy",
"default-src 'self'; "
"script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval'; "
"style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; "
"connect-src 'self'; font-src 'self' data:; object-src 'none'; "
"style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; "
"img-src 'self' data: blob:; "
"connect-src 'self'; "
"font-src 'self' data: https://fonts.gstatic.com; "
"object-src 'none'; "
"base-uri 'self'; worker-src 'self' blob:;"
)