From b2acfdad5d8fe428b5f12510d64936053c66f774 Mon Sep 17 00:00:00 2001
From: Jieiku
Date: Tue, 31 May 2022 12:44:27 -0700
Subject: Update CSP

---
 netlify.toml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'netlify.toml')

diff --git a/netlify.toml b/netlify.toml
index b8e4530..1a0c0e0 100644
--- a/netlify.toml
+++ b/netlify.toml
@@ -16,4 +16,4 @@ command = "zola build --base-url $DEPLOY_PRIME_URL"
     X-XSS-Protection = "1; mode=block"
     Referrer-Policy = "strict-origin-when-cross-origin"
     Strict-Transport-Security = "max-age=63072000; includeSubdomains"
-    Content-Security-Policy = "require-trusted-types-for 'script'; default-src 'none'; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; manifest-src 'self'; connect-src 'self'; form-action 'self'; media-src 'self' data: cdn.cloudflare.com www.youtube-nocookie.com player.vimeo.com; frame-src 'self' www.youtube-nocookie.com player.vimeo.com; font-src 'self' cdn.cloudflare.com cdn.jsdelivr.net fonts.gstatic.com; img-src 'self' data: cdn.cloudflare.com; style-src 'self' 'unsafe-inline' cdn.cloudflare.com cdn.jsdelivr.net fonts.googleapis.com; script-src 'self' www.youtube-nocookie.com player.vimeo.com"
+    Content-Security-Policy = "default-src 'none'; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; manifest-src 'self'; connect-src 'self'; form-action 'self'; media-src 'self' data: cdn.cloudflare.com www.youtube-nocookie.com player.vimeo.com; frame-src 'self' www.youtube-nocookie.com player.vimeo.com; font-src 'self' cdn.cloudflare.com cdn.jsdelivr.net fonts.gstatic.com; img-src 'self' data: cdn.cloudflare.com; style-src 'self' 'unsafe-inline' cdn.cloudflare.com cdn.jsdelivr.net fonts.googleapis.com; script-src 'self' www.youtube-nocookie.com player.vimeo.com"
-- 
cgit v1.3.1