Add missing CSP directives

OpenShock · Dec 3, 2024 · 7738962 · 7738962
1 parent d19222c
commit 7738962
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/svelte.config.js b/svelte.config.js
@@ -46,12 +46,15 @@ const config = {
           'self',
           'https://*.' + env.PUBLIC_SITE_DOMAIN,
           'wss://*.' + env.PUBLIC_SITE_DOMAIN,
+          'https://firmware.openshock.org',
+          'https://api.pwnedpasswords.com',
         ],
         'script-src': [
           'self',
           'https://challenges.cloudflare.com',
           'https://static.cloudflareinsights.com',
         ],
+        'frame-src': ['https://challenges.cloudflare.com'],
       },
     },
     version: {