From 84be7880340877b3fde207ede5e86007cc17908b Mon Sep 17 00:00:00 2001
From: Essem <smswessem@gmail.com>
Date: Fri, 9 Jun 2023 11:13:33 -0500
Subject: [PATCH] Fix CSP

---
 packages/backend/src/server/web/index.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/backend/src/server/web/index.ts b/packages/backend/src/server/web/index.ts
index c6748fd80b..55a125fac3 100644
--- a/packages/backend/src/server/web/index.ts
+++ b/packages/backend/src/server/web/index.ts
@@ -418,7 +418,7 @@ router.get("/notes/:note", async (ctx, next) => {
 			ctx.set("Cache-Control", "public, max-age=15");
 			ctx.set(
 				"Content-Security-Policy",
-				"default-src 'self' 'unsafe-inline'; img-src '*'; frame-ancestors '*'",
+				"default-src 'self' 'unsafe-inline'; img-src *; frame-ancestors *",
 			);
 
 			return;