fix: set font-src to 'self' on questions (#101)

httpjamesm · Mar 29, 2024 · a701810 · a701810
1 parent 23b8ed8
commit a701810
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/templates/question.html b/templates/question.html
@@ -7,7 +7,7 @@
         <link rel="stylesheet" href="/static/comments.css" />
         <meta
             http-equiv="Content-Security-Policy"
-            content="default-src 'none'; style-src 'self'; script-src 'self'; img-src {{ .imagePolicy }};"
+            content="default-src 'none'; style-src 'self'; script-src 'self'; img-src {{ .imagePolicy }}; font-src 'self';"
         />
         <meta name="description" content="{{ .question.ShortenedBody }}..." />
         {{ template "sharedHead.html" }}