testing csp header edits

dbt-msft · Sep 30, 2021 · e61e364 · e61e364
1 parent 5eb03d4
commit e61e364
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/_headers b/_headers
@@ -1,6 +1,6 @@
 /*
   Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
-  Content-Security-Policy: default-src 'none'; style-src 'self' data:; img-src 'self' data:; script-src 'self';  connect-src 'self'; frame-ancestors 'none';
+  Content-Security-Policy: default-src 'self'; style-src 'self' unsafe-inline *cdn.jsdelivr.net *fonts.googleapis.com data:; img-src 'self' data:; script-src 'self' unsafe-inline *jquery.com *googletagmanager.com; connect-src 'self'; frame-ancestors 'none'; font-src 'self' *fonts.googleapis.com
   X-Content-Type-Options: nosniff
   X-Frame-Options: DENY
   X-XSS-Protection: 1; mode=block