Merge pull request '[PR]: Fix invalid CSP policy' (#10296) from esm/calckey:fix/note-csp-urls into develop

Reviewed-on: https://codeberg.org/calckey/calckey/pulls/10296
2023-06-09 18:51:53 +00:00 · 2023-06-09 18:51:53 +00:00 · f6c2acc7f5
parent 3cc8f60ee9 84be788034
commit f6c2acc7f5
1 changed files with 1 additions and 1 deletions
--- a/packages/backend/src/server/web/index.ts
+++ b/packages/backend/src/server/web/index.ts
@ -418,7 +418,7 @@ router.get("/notes/:note", async (ctx, next) => {
 			ctx.set("Cache-Control", "public, max-age=15");
 			ctx.set(
 				"Content-Security-Policy",
-				"default-src 'self' 'unsafe-inline'; img-src '*'; frame-ancestors '*'",
+				"default-src 'self' 'unsafe-inline'; img-src *; frame-ancestors *",
 			);

 			return;