Allow self in CSP policy

silx-kit · Jul 1, 2024 · f653f5f · f653f5f
1 parent 6545796
commit f653f5f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/netlify.toml b/netlify.toml
@@ -14,4 +14,4 @@
     # - `script-src 'unsafe-eval'` because of cwise dependency in H5Web
     # - `img-src blob:` for JPEG/PNG images in Raw visualization
     # - `worker-src blob:` for H5WasmLocalFileProvider's inline worker
-    Content-Security-Policy = "default-src 'none'; connect-src data:; script-src 'unsafe-eval'; img-src blob:; worker-src blob:"
+    Content-Security-Policy = "default-src 'none'; connect-src 'self' data:; script-src 'self' 'unsafe-eval'; style-src 'self'; img-src blob:; worker-src blob:"