Fix the CSP policy to let the Fedora magazine widget work

Since https://pagure.io/fedora-web/websites/pull-request/57 got merged,
we also need to fix the CSP policy since it get the article from a local
json file on the server (see the PR for details)
This commit is contained in:
Michael Scherer
2019-10-17 12:38:00 -04:00
committed by Pierre-Yves Chibon
parent 7fb214fe3d
commit f01ae28b8c

View File

@@ -1 +1 @@
Header always set Content-Security-Policy "default-src 'none'; img-src 'self' https://fedoramagazine.org; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; connect-src https://fedoramagazine.org https://builds.coreos.fedoraproject.org; "
Header always set Content-Security-Policy "default-src 'none'; img-src 'self' https://fedoramagazine.org; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://builds.coreos.fedoraproject.org; "