hotfix(v1.7.10): add font-src to CSP for data URI fonts
This commit is contained in:
@@ -98,6 +98,7 @@ async def cache_control_middleware(request: Request, call_next):
|
||||
"frame-src 'self' https://login.microsoftonline.com; "
|
||||
"form-action 'self' https://login.microsoftonline.com; "
|
||||
"img-src 'self' data:; "
|
||||
"font-src 'self' data:;"
|
||||
)
|
||||
return response
|
||||
|
||||
|
||||
Reference in New Issue
Block a user