Add worker-src blob

dfpc-coe · Sep 10, 2024 · ce6450c · ce6450c
1 parent 8cb0988
commit ce6450c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/api/nginx.conf b/api/nginx.conf
@@ -30,7 +30,7 @@ http {
         add_header 'Referrer-Policy' 'strict-origin-when-cross-origin' always;
         add_header 'Strict-Transport-Security' 'max-age=31536000; includeSubDomains; preload' always;
         add_header 'Permissions-Policy' 'fullscreen=(self), geolocation=(self), clipboard-read=(self), clipboard-write=(self)' always;
-        add_header 'Content-Security-Policy' "default-src 'self'; img-src 'self' data:; upgrade-insecure-requests;" always;
+        add_header 'Content-Security-Policy' "default-src 'self'; img-src 'self' data:; worker-src 'self' blob:; upgrade-insecure-requests;" always;
 
         location / {
             if ($request_uri ~ ^/(.*)\.html) {