Better CSP

SpiderOak · Sep 18, 2015 · ef5ebfb · ef5ebfb
1 parent 638ddae
commit ef5ebfb
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/www/index.html b/www/index.html
@@ -9,7 +9,7 @@
   <link rel="stylesheet" type="text/css" href="css/index.css" />
   <link rel="stylesheet" type="text/css" href="css/Source_Sans_Pro/stylesheet.css" />
   <link rel="stylesheet" type="text/css" href="css/Jura_Light/stylesheet.css" />
-  <meta http-equiv="Content-Security-Policy" content="default-src 'self' https://encryptr.org https://*.crypton.io wss://*.crypton.io blob: gap: https://ssl.gstatic.com; style-src 'self' 'unsafe-inline'; media-src *">
+  <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self' file: blob: gap: https://ssl.gstatic.com; style-src 'self'; media-src *; child-src 'self' blob:; connect-src 'self' https://encryptr.org https://*.crypton.io wss://*.crypton.io">
   <title>Encryptr</title>
   </head>
   <body>