Merge pull request #281 from poanetwork/google-fonts-in-csp-#280

Add Google Fonts to Content Security Policy
7 years ago · 4446412e5c
parent 32bd02e24b eb624fdad3
commit 4446412e5c
1 changed files with 2 additions and 2 deletions
--- a/apps/explorer_web/lib/explorer_web/router.ex
+++ b/apps/explorer_web/lib/explorer_web/router.ex
@ -11,9 +11,9 @@ defmodule ExplorerWeb.Router do
      "content-security-policy" => "\
        default-src 'self';\
        script-src 'self' 'unsafe-inline' 'unsafe-eval';\
-        style-src 'self' 'unsafe-inline' 'unsafe-eval';\
+        style-src 'self' 'unsafe-inline' 'unsafe-eval' https://fonts.googleapis.com;\
        img-src 'self' 'unsafe-inline' 'unsafe-eval' data:;\
-        font-src 'self' 'unsafe-inline' 'unsafe-eval' data:;\
+        font-src 'self' 'unsafe-inline' 'unsafe-eval' https://fonts.gstatic.com data:;\
      "
    })
  end