diff --git a/src/main.py b/src/main.py index 1c38dc9..eee16dd 100644 --- a/src/main.py +++ b/src/main.py @@ -85,7 +85,17 @@ app.add_middleware( hsts_preload=False, frame_options='DENY', referrer_policy='strict-origin-when-cross-origin', - content_security_policy="default-src 'self'; frame-ancestors 'none'; base-uri 'self'; object-src 'none'", + content_security_policy=( + "default-src 'self'; " + "script-src 'self' 'unsafe-inline' https://unpkg.com https://cdn.jsdelivr.net; " + "style-src 'self' 'unsafe-inline' https://unpkg.com https://cdn.jsdelivr.net; " + "img-src 'self' data: https:; " + "font-src 'self' https://unpkg.com https://cdn.jsdelivr.net data:; " + "connect-src 'self'; " + "frame-ancestors 'none'; " + "base-uri 'self'; " + "object-src 'none'" + ), )