|
|
|
@ -12,7 +12,7 @@ func SetHeaders(w http.ResponseWriter) {
@@ -12,7 +12,7 @@ func SetHeaders(w http.ResponseWriter) {
|
|
|
|
|
|
|
|
|
|
// Content security policy
|
|
|
|
|
csp := []string{ |
|
|
|
|
"script-src 'self' 'sha256-2HPCfJIJHnY0NrRDPTOdC7AOSJIcQyNxzUuut3TsYRY='", |
|
|
|
|
"script-src 'self' 'sha256-2HPCfJIJHnY0NrRDPTOdC7AOSJIcQyNxzUuut3TsYRY=' 'sha256-qYEKg5UMg/KbbMBkyPIGsxtkfn/safeLBT08DK3592g=' 'sha256-2erOadwY1DsoNdxVjGlxldMJrFEUzr5sLDdB8lmm9m8=' 'sha256-DgrU+KwEGMFcB8B2ZdQyuxWWvTm7LeGpc+8SkxbSxGA='", |
|
|
|
|
"worker-src 'self' blob:", // No single quotes around blob:
|
|
|
|
|
} |
|
|
|
|
w.Header().Set("Content-Security-Policy", strings.Join(csp, "; ")) |
|
|
|
|