csp fix

add2cal · Dec 18, 2023 · a25bae7 · a25bae7
1 parent 4260648
commit a25bae7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/public/staticwebapp.config.json b/public/staticwebapp.config.json
@@ -14,7 +14,7 @@
     "Strict-Transport-Security": "max-age=31536000; includeSubDomains",
     "Referrer-Policy": "strict-origin-when-cross-origin",
     "Access-Control-Allow-Methods": "GET",
-    "Content-Security-Policy": "base-uri 'self'; font-src 'self' data:; form-action 'self'; frame-ancestors 'self'; img-src 'self' https://*.add-to-calendar-pro.com https://add-to-calendar-pro.com https://*.caldn.net https://*.paddle.com data:; object-src 'none'; script-src-attr 'self'; script-src 'self' https://*.add-to-calendar-pro.com https://add-to-calendar-pro.com https://*.paddle.com; style-src 'self' https://*.add-to-calendar-pro.com https://add-to-calendar-pro.com https://cdn.jsdelivr.net; frame-src 'self' https://*.paddle.com; upgrade-insecure-requests;",
+    "Content-Security-Policy": "base-uri 'self'; font-src 'self' data:; form-action 'self'; frame-ancestors 'self'; img-src 'self' https://*.add-to-calendar-pro.com https://add-to-calendar-pro.com https://*.caldn.net https://*.paddle.com data:; object-src 'none'; script-src-attr 'self'; script-src 'self' 'unsafe-inline' https://*.add-to-calendar-pro.com https://add-to-calendar-pro.com https://*.paddle.com; style-src 'self' 'unsafe-inline' https://*.add-to-calendar-pro.com https://add-to-calendar-pro.com https://cdn.jsdelivr.net; frame-src 'self' https://*.paddle.com; upgrade-insecure-requests;",
     "Permissions-Policy": "geolocation=(),midi=(),microphone=(),camera=(),gyroscope=(*),encrypted-media=(*),payment=()"
   }
 }