1 file changed
+3
@@ -75,6 +75,9 @@ function buildCsp(): string {
|
||||
// loads generally.
|
||||
"img-src 'self' data: https:",
|
||||
"font-src 'self'",
|
||||
// The Home page's "Find us" map is a Google Maps embed (see (customer)/home/page.tsx); without this it falls
|
||||
// back to default-src 'self' and the browser refuses to load the frame. Only that one origin is allowed.
|
||||
"frame-src https://www.google.com",
|
||||
"connect-src 'self'",
|
||||
"worker-src 'self'",
|
||||
"manifest-src 'self'",
|
||||
|
||||
Reference in new issue
Block a user