fix csp in boilerplate

socketsupply · Mar 11, 2024 · ec33e30 · ec33e30
1 parent 69de201
commit ec33e30
Showing 1 changed file with 7 additions and 6 deletions.
diff --git a/src/templates/src/index.html b/src/templates/src/index.html
@@ -6,12 +6,13 @@
     <meta
       http-equiv="Content-Security-Policy"
       content="
-        connect-src https: file: ipc: socket: ws://localhost:*;
-        script-src https: socket: http://localhost:* 'unsafe-eval';
-        worker-src blob: socket: 'unsafe-eval' 'unsafe-inline';
-        img-src https: data: file: http://localhost:*;
-        child-src 'none';
-        object-src 'none';
+        connect-src socket: https: http: blob: ipc: wss: ws: ws://localhost:*;
+         script-src socket: https: http: blob: http://localhost:* 'unsafe-eval' 'unsafe-inline';
+         worker-src socket: https: http: blob: 'unsafe-eval' 'unsafe-inline';
+          frame-src socket: https: http: blob: http://localhost:*;
+            img-src socket: https: http: blob: http://localhost:*;
+          child-src socket: https: http: blob:;
+         object-src 'none';
       "
     >
   </head>