fix: update csp

TradeTrust · Jul 26, 2024 · 11943e2 · 11943e2
1 parent cfdfa5a
commit 11943e2
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/netlify.toml b/netlify.toml
@@ -30,5 +30,6 @@
   [headers.values]
     X-Content-Type-Options = "nosniff"
     Strict-Transport-Security = "max-age=31536000; includeSubDomains"
-    Content-Security-Policy = "default-src 'self'; img-src 'self'; style-src 'self' https://fonts.googleapis.com https://use.fontawesome.com 'unsafe-inline'; script-src 'self' https://identity.netlify.com https://www.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; font-src 'self' data: https://fonts.gstatic.com https://use.fontawesome.com; connect-src 'self' https://www.google-analytics.com https://identity.netlify.com; frame-src 'self' https://app.netlify.com; frame-ancestors 'self'; object-src 'none';"
+    Content-Security-Policy = "default-src 'self'; img-src 'self'; style-src 'self' https://fonts.googleapis.com https://use.fontawesome.com 'unsafe-inline'; script-src 'self' https://identity.netlify.com https://www.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; font-src 'self' data: https://fonts.gstatic.com https://use.fontawesome.com https://ui.tradetrust.io; connect-src 'self' https://www.google-analytics.com https://identity.netlify.com https://dns.google https://cloudflare-dns.com; frame-src 'self' https://app.netlify.com; frame-ancestors 'self'; object-src 'none';"
+