Add Content-Security-Policy header, closes #222

Signed-off-by: Mikhail Petrov <[email protected]>
nspcc-dev · Aug 29, 2024 · f8233ca · f8233ca
1 parent c3c5fd3
commit f8233ca
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/public/index.html b/public/index.html
@@ -15,6 +15,7 @@
   <meta property="og:image" content="/img/cover.png">
   <meta name="keywords" content="NeoFS,Neo,Blockchain,智能经济,区块链">
   <meta name="theme-color" content="#ffffff" />
+  <meta http-equiv="Content-Security-Policy" content="default-src 'self' https://verify.walletconnect.com/; script-src 'self'; connect-src 'self' http://127.0.0.1:60004 https://dapi.o3.app:60003 https://rest.t5.fs.neo.org wss://relay.walletconnect.com; style-src 'unsafe-inline' 'self'; font-src 'self'; img-src 'self';">
 </head>
 
 <body>