hotfix(v1.7.10): add font-src to CSP for data URI fonts

2026-04-27 10:32:35 +02:00
parent e2cea50d87
commit be700fefc3
2 changed files with 3 additions and 2 deletions
--- a/backend/main.py
+++ b/backend/main.py
@@ -97,7 +97,8 @@ async def cache_control_middleware(request: Request, call_next):
            "connect-src 'self' https://login.microsoftonline.com; "
            "frame-src 'self' https://login.microsoftonline.com; "
            "form-action 'self' https://login.microsoftonline.com; "
-            "img-src 'self' data:;"
+            "img-src 'self' data:; "
+            "font-src 'self' data:;"
        )
    return response