fix(security): authorize site uploads and harden tokens, media and request identity
This commit is contained in:
@@ -12,7 +12,6 @@ export function buildContentSecurityPolicy(nonce: string): string {
|
||||
"https://www.google.com/recaptcha/",
|
||||
"https://www.gstatic.com/recaptcha/",
|
||||
"https://static.cloudflareinsights.com",
|
||||
"https://cdn.jsdelivr.net",
|
||||
...(isDev ? ["'unsafe-eval'"] : []),
|
||||
].join(" ");
|
||||
|
||||
|
||||
Reference in New Issue
Block a user