Dateien nach "backend/src" hochladen
This commit is contained in:
@@ -17,8 +17,8 @@ app.use((_req, res, next) => {
|
|||||||
"font-src 'self' https://fonts.gstatic.com",
|
"font-src 'self' https://fonts.gstatic.com",
|
||||||
// iCal-Feeds werden serverseitig geprosxt → nur 'self' nötig
|
// iCal-Feeds werden serverseitig geprosxt → nur 'self' nötig
|
||||||
"connect-src 'self'",
|
"connect-src 'self'",
|
||||||
// data: für Avatare (base64), google.com für Favicons im QuickLinks-Widget
|
// data: für Avatare (base64), google.com + gstatic.com für Favicons im QuickLinks-Widget
|
||||||
"img-src 'self' data: https://www.google.com",
|
"img-src 'self' data: https://www.google.com https://t1.gstatic.com https://t2.gstatic.com https://t3.gstatic.com",
|
||||||
"worker-src 'self'",
|
"worker-src 'self'",
|
||||||
"object-src 'none'",
|
"object-src 'none'",
|
||||||
"base-uri 'self'",
|
"base-uri 'self'",
|
||||||
|
|||||||
Reference in New Issue
Block a user