we dont need 3rd party fonts, lock it down

sidekiq · Jan 2, 2025 · 32d19b2 · 32d19b2
1 parent 48f7110
commit 32d19b2
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/sidekiq/web/application.rb b/lib/sidekiq/web/application.rb
@@ -16,7 +16,7 @@ class Application
         "default-src 'self' https: http:",
         "child-src 'self'",
         "connect-src 'self' https: http: wss: ws:",
-        "font-src 'self' https: http:",
+        "font-src 'none'",
         "frame-src 'self'",
         "img-src 'self' https: http: data:",
         "manifest-src 'self'",