Merge pull request #208 from w3bdesign/development

Improve csp
w3bdesign · Jul 22, 2024 · 40f21b2 · 40f21b2
2 parents 2f3d93c + 03798ff
commit 40f21b2
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/next.config.mjs b/next.config.mjs
@@ -23,7 +23,7 @@ const nextConfig = {
           },
           {
             key: 'Content-Security-Policy',
-            value: "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'none'; base-uri 'self'; frame-src 'none'; img-src 'self' https://cdn.sanity.io data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:;",
+            value: "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' https://cdn.sanity.io data:; font-src 'self' data:; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; form-action 'self'; upgrade-insecure-requests;",
           },
         ],
       },