fix: update Content Security Policy to allow Cloudflare Turnstile scripts
This commit is contained in:
@@ -18,13 +18,13 @@ app.use(helmet({
|
|||||||
directives: {
|
directives: {
|
||||||
defaultSrc: ["'self'"],
|
defaultSrc: ["'self'"],
|
||||||
styleSrc: ["'self'", "'unsafe-inline'", "https://ui-avatars.com"],
|
styleSrc: ["'self'", "'unsafe-inline'", "https://ui-avatars.com"],
|
||||||
scriptSrc: ["'self'"],
|
scriptSrc: ["'self'", "https://challenges.cloudflare.com"],
|
||||||
imgSrc: ["'self'", "data:", "https:", "https://ui-avatars.com"],
|
imgSrc: ["'self'", "data:", "https:", "https://ui-avatars.com"],
|
||||||
connectSrc: ["'self'"],
|
connectSrc: ["'self'", "https://challenges.cloudflare.com"],
|
||||||
fontSrc: ["'self'"],
|
fontSrc: ["'self'"],
|
||||||
objectSrc: ["'none'"],
|
objectSrc: ["'none'"],
|
||||||
mediaSrc: ["'self'"],
|
mediaSrc: ["'self'"],
|
||||||
frameSrc: ["'none'"],
|
frameSrc: ["'self'", "https://challenges.cloudflare.com"],
|
||||||
},
|
},
|
||||||
},
|
},
|
||||||
hsts: {
|
hsts: {
|
||||||
|
|||||||
Reference in New Issue
Block a user