update csp

Weaverse · Nov 27, 2023 · 9fe8807 · 9fe8807
1 parent 246b61b
commit 9fe8807
Showing 1 changed file with 7 additions and 6 deletions.
diff --git a/app/weaverse/create-weaverse.server.ts b/app/weaverse/create-weaverse.server.ts
@@ -33,23 +33,24 @@ export function getWeaverseCsp(request: Request) {
     frameAncestors: weaverseHosts,
     defaultSrc: [
       "'self'",
-      'https://cdn.shopify.com',
-      'https://shopify.com',
-      'https://*.youtube.com',
-      'https://*.google.com',
+      'cdn.shopify.com',
+      'shopify.com',
+      '*.youtube.com',
+      '*.google.com',
+      'fonts.gstatic.com',
       ...weaverseHosts,
     ],
     imgSrc: [
       "'self'",
       "data:",
-      'https://cdn.shopify.com',
+      'cdn.shopify.com',
       ...weaverseHosts,
     ],
     styleSrc: [
       "'self'",
       "'unsafe-inline'",
       'fonts.googleapis.com',
-      'https://cdn.shopify.com',
+      'cdn.shopify.com',
       ...weaverseHosts,
     ],
   };