fsylvain/compact-portfolio
1
0
Fork 0
mirror of https://github.com/Floriansylvain/compact-portfolio.git synced 2026-08-19 11:43:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

feat: update CSP to remove 'unsafe-inline' and restrict img-src

Browse Source
This commit is contained in:
Florian Sylvain
2025-09-09 17:23:30 +02:00
parent eb9f85ead0
commit 0a27f3cc8d
1 changed files with 1 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server.js
+1 -4
View File
@@ -54,9 +54,6 @@ function generateCSP() {
if (scriptSources.length > 0) {
scriptSrc += ` ${scriptSources.join(" ")}`;
}
if (scriptSources.length === 0) {
scriptSrc += " 'unsafe-inline'";
}
let styleSrc = "'self'";
if (styleSources.length > 0) {
@@ -70,7 +67,7 @@ function generateCSP() {
"default-src 'self'",
`script-src ${scriptSrc}`,
`style-src ${styleSrc}`,
"img-src 'self' data: https:",
"img-src 'self' https:",
"font-src 'self'",
"connect-src 'self'",
"media-src 'self'",