chore: added permissive connect-src to csp

Open-Attestation · Jul 23, 2024 · e9f1b59 · e9f1b59
1 parent 13adf7e
commit e9f1b59
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/public/_headers b/public/_headers
@@ -1,2 +1,2 @@
 X-Frame-Options: DENY
-Content-Security-Policy: default-src *.sepolia.org *.polygon.technology dns.google cloudflare-dns.com; frame-ancestors 'none';
+Content-Security-Policy: default-src 'self' *.sepolia.org *.polygon.technology dns.google cloudflare-dns.com; frame-ancestors 'self' 'none'; connect-src 'self' *;