1 file changed
+3
@@ -75,6 +75,9 @@ function buildCsp(): string {
|
|||||||
// loads generally.
|
// loads generally.
|
||||||
"img-src 'self' data: https:",
|
"img-src 'self' data: https:",
|
||||||
"font-src 'self'",
|
"font-src 'self'",
|
||||||
|
// The Home page's "Find us" map is a Google Maps embed (see (customer)/home/page.tsx); without this it falls
|
||||||
|
// back to default-src 'self' and the browser refuses to load the frame. Only that one origin is allowed.
|
||||||
|
"frame-src https://www.google.com",
|
||||||
"connect-src 'self'",
|
"connect-src 'self'",
|
||||||
"worker-src 'self'",
|
"worker-src 'self'",
|
||||||
"manifest-src 'self'",
|
"manifest-src 'self'",
|
||||||
|
|||||||
Reference in new issue
Block a user