web/headers: update csp yet again

whatever dude
imputnet · Sep 18, 2024 · 52599dd · 52599dd
1 parent 9024418
commit 52599dd
Showing 1 changed file with 1 addition and 9 deletions.
diff --git a/web/src/routes/_headers/+server.ts b/web/src/routes/_headers/+server.ts
@@ -9,15 +9,7 @@ const allowedScriptOrigins = [
 export async function GET() {
     const CSP = {
         "connect-src": ["*"],
-        "default-src": ["'none'"],
-
-        "font-src": ["'self'"],
-        "style-src": ["'self'"],
-        "style-src-attr": ["'self'"],
-        "style-src-elem": ["'self'"],
-        "img-src": ["'self'", "data:"],
-        "manifest-src": ["'self'"],
-        "worker-src": ["'self'"],
+        "default-src": ["'self'"],
 
         "script-src": allowedScriptOrigins,
         "script-src-attr": allowedScriptOrigins,