From a82367ed0c46693d4242c4a102d8fc6f7fd939cc Mon Sep 17 00:00:00 2001 From: Rui Saraiva Date: Sun, 12 Dec 2021 22:30:29 +0000 Subject: [PATCH] fix: update security headers --- next.config.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/next.config.js b/next.config.js index c8c841e..37cd1a8 100644 --- a/next.config.js +++ b/next.config.js @@ -23,7 +23,7 @@ module.exports = { }, { key: 'Content-Security-Policy', - value: `default-src 'self' 'unsafe-inline'; connect-src 'self' https://hive.splitbee.io https://vitals.vercel-insights.com; script-src 'self' https://cdn.splitbee.io; font-src 'self' https://fonts.gstatic.com; frame-ancestors 'self'`, + value: `default-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self' https://hive.splitbee.io https://vitals.vercel-insights.com; script-src 'self' https://cdn.splitbee.io; font-src 'self' https://fonts.gstatic.com; frame-ancestors 'self'`, }, ], },