From f8e7e58d263e262553099c1f3eb6dfc04965dc13 Mon Sep 17 00:00:00 2001 From: colin Date: Mon, 11 Nov 2024 23:33:04 -0500 Subject: [PATCH] last ones I think. --- docker/resume/nginx.conf | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docker/resume/nginx.conf b/docker/resume/nginx.conf index 183b520..9835abf 100644 --- a/docker/resume/nginx.conf +++ b/docker/resume/nginx.conf @@ -15,11 +15,11 @@ server { add_header Referrer-Policy "strict-origin-when-cross-origin" always; add_header Permissions-Policy "camera=(), microphone=(), geolocation=(), accelerometer=(), gyroscope=(), magnetometer=(), payment=(), usb=()" always; - # Updated Content Security Policy (CSP) with specified external domains + # Updated Content Security Policy (CSP) with 'unsafe-inline' temporarily for style-src add_header Content-Security-Policy " default-src 'none'; script-src 'self' 'nonce-$nonce' https://matomo.nixc.us https://gist.github.com https://assets-cdn.github.com; - style-src 'self' 'nonce-$nonce' https://colinknapp.com https://getbootstrap.com https://fonts.googleapis.com; + style-src 'self' 'nonce-$nonce' https://colinknapp.com https://getbootstrap.com https://fonts.googleapis.com 'unsafe-inline'; img-src 'self' https://matomo.nixc.us https://colinknapp.com https://hedgedoc.nixc.us https://assets-cdn.github.com https://github.com https://forkaweso.me https://ionicons.com https://twitter.com data:; font-src 'self' https://fonts.gstatic.com https://github.com https://forkaweso.me data:; connect-src 'self' https://matomo.nixc.us;