openvibers/openvibe.host Commits
The legal pages' brand font loads: font-src allows openvibe.network (their navbar comes from there) (#255)
Changes
@@@ -39,7 +39,7 @@ const DASHBOARD_CSP_HEADER = Object.entries({// Cloudflare Web Analytics: the edge injects its beacon into every page (as on Wiki and Live).'script-src': ["'self'", "'unsafe-inline'", 'https://openvibe.network', 'https://static.cloudflareinsights.com'],'style-src': ["'self'", "'unsafe-inline'", 'https://openvibe.network', 'https://fonts.googleapis.com', 'https://cdnjs.cloudflare.com'],-- 'font-src': ["'self'", 'data:', 'https://fonts.gstatic.com', 'https://cdnjs.cloudflare.com'],++ 'font-src': ["'self'", 'data:', 'https://fonts.gstatic.com', 'https://cdnjs.cloudflare.com', 'https://openvibe.network'],'img-src': ["'self'", 'data:', 'https:'],'connect-src': ["'self'", 'https://openvibe.network', 'https://openvibe.events', 'https://cloudflareinsights.com'],'frame-src': ["'self'", 'https://openvibe.network'],
@@ -39,7 +39,7 @@ const DASHBOARD_CSP_HEADER = Object.entries({
@@ -39,7 +39,7 @@ const DASHBOARD_CSP_HEADER = Object.entries({
// Cloudflare Web Analytics: the edge injects its beacon into every page (as on Wiki and Live).
// Cloudflare Web Analytics: the edge injects its beacon into every page (as on Wiki and Live).
'script-src': ["'self'", "'unsafe-inline'", 'https://openvibe.network', 'https://static.cloudflareinsights.com'],
'script-src': ["'self'", "'unsafe-inline'", 'https://openvibe.network', 'https://static.cloudflareinsights.com'],
'style-src': ["'self'", "'unsafe-inline'", 'https://openvibe.network', 'https://fonts.googleapis.com', 'https://cdnjs.cloudflare.com'],
'style-src': ["'self'", "'unsafe-inline'", 'https://openvibe.network', 'https://fonts.googleapis.com', 'https://cdnjs.cloudflare.com'],
- 'font-src': ["'self'", 'data:', 'https://fonts.gstatic.com', 'https://cdnjs.cloudflare.com'],
+ 'font-src': ["'self'", 'data:', 'https://fonts.gstatic.com', 'https://cdnjs.cloudflare.com', 'https://openvibe.network'],
'img-src': ["'self'", 'data:', 'https:'],
'img-src': ["'self'", 'data:', 'https:'],
'connect-src': ["'self'", 'https://openvibe.network', 'https://openvibe.events', 'https://cloudflareinsights.com'],
'connect-src': ["'self'", 'https://openvibe.network', 'https://openvibe.events', 'https://cloudflareinsights.com'],
'frame-src': ["'self'", 'https://openvibe.network'],
'frame-src': ["'self'", 'https://openvibe.network'],