fix: enhance CSP rule (#392)

apache · Feb 14, 2025 · e4b928f · e4b928f
1 parent e1b3d26
commit e4b928f
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/themes/docsy/layouts/_default/baseof.html b/themes/docsy/layouts/_default/baseof.html
@@ -3,9 +3,8 @@
   <head>
       <!-- To handle CSP policy -->
       <meta http-equiv="Content-Security-Policy"
-            content="default-src 'self';
-                    style-src 'self' 'unsafe-inline' https://code.jquery.com https://cdn.jsdelivr.net;
-                    script-src 'self' https://code.jquery.com https://cdn.jsdelivr.net;
+            content="script-src 'self' 'unsafe-inline' 'unsafe-eval' https://code.jquery.com https://cdn.jsdelivr.net https://fonts.googleapis.com/;
+                    style-src 'self' 'unsafe-inline' https://code.jquery.com https://cdn.jsdelivr.net https://fonts.googleapis.com/;
                     font-src 'self' https://cdn.jsdelivr.net;
                     img-src 'self' data:">
     {{ partial "head.html" . }}