From 070348d760e88e9f1711743dfddd4dfd54bf0757 Mon Sep 17 00:00:00 2001 From: "sequr.be" Date: Sat, 4 Apr 2026 22:20:22 +0200 Subject: [PATCH] Fix CSP --- static/.htaccess | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/static/.htaccess b/static/.htaccess index 88f1aba..1b04fd0 100644 --- a/static/.htaccess +++ b/static/.htaccess @@ -18,4 +18,4 @@ Header set X-Permitted-Cross-Domain-Policies "all" Header set X-Powered-By "Coffee" Header set X-UA-Compatible "IE=edge,chrome=1" Header set Permissions-Policy "accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), browsing-topics=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(self), fullscreen=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), speaker-selection=(); storage-access=(), usb=(), web-share=(), xr-spatial-tracking=()" -Header set Content-Security-Policy "default-src 'self' https://spiriet.be ; child-src blob: ; connect-src https://tiles.openfreemap.org ; frame-src 'self' ; img-src 'self' blob: data: https://spiriet.be ; script-src 'self' https://unpkg.com/maplibre-gl@latest/dist/maplibre-gl.js https://cdn.jsdelivr.net/npm/bootstrap@5.3.8/dist/js/bootstrap.bundle.min.js 'unsafe-inline' ; style-src 'self' 'unsafe-inline' https://spiriet.be https://unpkg.com/maplibre-gl@latest/dist/maplibre-gl.css https://cdn.jsdelivr.net/npm/bootstrap@5.3.8/dist/css/bootstrap.min.css ; worker-src blob: ;" +Header set Content-Security-Policy "default-src 'self' https://spiriet.be ; child-src blob: ; connect-src https://tiles.openfreemap.org ; frame-src 'self' ; img-src 'self' blob: data: https://spiriet.be ; script-src 'self' https://unpkg.com/maplibre-gl@latest/dist/maplibre-gl.js https://unpkg.com/maplibre-gl/dist/maplibre-gl.js https://cdn.jsdelivr.net/npm/bootstrap@5.3.8/dist/js/bootstrap.bundle.min.js 'unsafe-inline' ; style-src 'self' 'unsafe-inline' https://spiriet.be https://unpkg.com/maplibre-gl@latest/dist/maplibre-gl.css https://unpkg.com/maplibre-gl/dist/maplibre-gl.css https://cdn.jsdelivr.net/npm/bootstrap@5.3.8/dist/css/bootstrap.min.css ; worker-src blob: ;" -- 2.51.2