We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent dd8c2b7 commit 8ba403eCopy full SHA for 8ba403e
webapp/src/EventListener/AddContentSecurityPolicyListener.php
@@ -17,7 +17,7 @@ public function __invoke(ResponseEvent $event): void
17
// the profiler requires 'unsafe-eval' for script-src 'self'.
18
$response = $event->getResponse();
19
$cspExtra = $this->profiler ? "'unsafe-eval'" : "";
20
- $csp = "default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' $cspExtra; img-src 'self' data:; worker-src 'self' blob:";
+ $csp = "default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' $cspExtra; img-src 'self' data:; worker-src 'self' blob:; font-src 'self' data:;";
21
$response->headers->set('Content-Security-Policy', $csp);
22
}
23
0 commit comments