LukeParke/website
1
0
Fork 0
mirror of https://github.com/LukeHagar/website.git synced 2025-12-09 04:22:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

update posthog csp

Browse Source
This commit is contained in:
Jesse Winton
2025-01-10 13:19:41 -05:00
parent 16ee7fe7c2
commit ac4cb049cb
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/hooks.server.ts
View File

@@ -40,7 +40,7 @@ const securityheaders: Handle = async ({ event, resolve }) => {
const cspDirectives = [ const cspDirectives = [
"default-src 'self'", "default-src 'self'",
"script-src 'self' 'unsafe-inline' 'unsafe-eval'", "script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.posthog.com",
"style-src 'self' 'unsafe-inline'", "style-src 'self' 'unsafe-inline'",
"img-src 'self' data: https:", "img-src 'self' data: https:",
"font-src 'self'", "font-src 'self'",
@@ -50,7 +50,7 @@ const securityheaders: Handle = async ({ event, resolve }) => {
"frame-ancestors 'self' https://www.youtube.com https://*.vimeo.com", "frame-ancestors 'self' https://www.youtube.com https://*.vimeo.com",
'block-all-mixed-content', 'block-all-mixed-content',
'upgrade-insecure-requests', 'upgrade-insecure-requests',
"connect-src 'self' https://cloud.appwrite.io", "connect-src 'self' https://cloud.appwrite.io https://*.posthog.com",
"frame-src 'self' https://www.youtube.com https://status.appwrite.online https://www.youtube-nocookie.com https://player.vimeo.com" "frame-src 'self' https://www.youtube.com https://status.appwrite.online https://www.youtube-nocookie.com https://player.vimeo.com"
]; ];