diff --git a/main.go b/main.go index 2e866a0..f7b10ca 100644 --- a/main.go +++ b/main.go @@ -97,7 +97,7 @@ func withHeaders(next http.Handler) http.Handler { w.Header().Set("X-Frame-Options", "DENY") w.Header().Set("Referrer-Policy", "strict-origin-when-cross-origin") w.Header().Set("Permissions-Policy", "camera=(), microphone=(), geolocation=()") - w.Header().Set("Content-Security-Policy", "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data:; connect-src 'self'; upgrade-insecure-requests") + w.Header().Set("Content-Security-Policy", "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' https://cdn.vercel-insights.com 'unsafe-inline'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data:; connect-src 'self' https://vitals.vercel-insights.com; upgrade-insecure-requests") w.Header().Set("X-No-Packets-Were-Harmed", "true") next.ServeHTTP(w, r) }) diff --git a/static/index.html b/static/index.html index 2b16be1..18c7a82 100644 --- a/static/index.html +++ b/static/index.html @@ -22,6 +22,12 @@ + + + +
diff --git a/vercel.json b/vercel.json index 2470378..35c9ac8 100644 --- a/vercel.json +++ b/vercel.json @@ -36,7 +36,7 @@ }, { "key": "Content-Security-Policy", - "value": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data:; connect-src 'self'; upgrade-insecure-requests" + "value": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' https://cdn.vercel-insights.com 'unsafe-inline'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data:; connect-src 'self' https://vitals.vercel-insights.com; upgrade-insecure-requests" }, { "key": "X-No-Packets-Were-Harmed",