Rewrite half the theme to make Mozilla observatory more happy about strict CSP

This commit is contained in:
daudix
2024-10-18 18:16:38 +03:00
parent 932c7d9aa4
commit 26b12aadf6
19 changed files with 730 additions and 679 deletions

View File

@ -165,10 +165,10 @@ csp = [
{ directive = "font-src", domains = ["'self'", "data:"] },
{ directive = "img-src", domains = ["'self'", "https:", "data:"] },
{ directive = "media-src", domains = ["'self'", "https:", "data:"] },
{ directive = "script-src", domains = ["'self'", "'unsafe-inline'"] },
{ directive = "script-src", domains = ["'self'"] },
{ directive = "style-src", domains = ["'self'", "'unsafe-inline'"] },
{ directive = "frame-src", domains = ["https://player.vimeo.com", "https://www.youtube-nocookie.com", "https://toot.community"] },
{ directive = "connect-src", domains = ["https:"] },
{ directive = "connect-src", domains = ["https://toot.community"] },
]
# Display outlines around all elements for debugging purposes
# debug_layout = true