diff --git a/src/TaxBaik.Web/Program.cs b/src/TaxBaik.Web/Program.cs index e72afdf..9178261 100644 --- a/src/TaxBaik.Web/Program.cs +++ b/src/TaxBaik.Web/Program.cs @@ -341,7 +341,7 @@ app.Use(async (context, next) => context.Response.Headers["X-Permitted-Cross-Domain-Policies"] = "none"; if (!context.Response.Headers.ContainsKey("Content-Security-Policy")) { - context.Response.Headers["Content-Security-Policy"] = "default-src 'self'; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://www.googletagmanager.com https://static.cloudflareinsights.com; connect-src 'self' https: https://static.cloudflareinsights.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self';"; + context.Response.Headers["Content-Security-Policy"] = "default-src 'self'; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://www.googletagmanager.com; connect-src 'self' https:; frame-ancestors 'none'; base-uri 'self'; form-action 'self';"; } await next();