disallow unsafe-inline

talentlessguy · talentlessguy · commit d9ea012a99c5 · 2025-07-17T16:16:22.000+03:00
diff --git a/apps/web/public/_headers b/apps/web/public/_headers
@@ -1,2 +1,2 @@
 /*
-  Content-Security-Policy: default-src 'self' https://delegate.ens.domains https://*.multi-delegate.pages.dev https://multi-delegate.pages.dev; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com; object-src 'none'; frame-src 'self' https://verify.walletconnect.com https://verify.walletconnect.org; frame-ancestors 'self' https://app.safe.global; connect-src 'self' *; img-src 'self' data: blob: *;
+  Content-Security-Policy: default-src 'self' https://delegate.ens.domains https://*.multi-delegate.pages.dev https://multi-delegate.pages.dev; script-src 'self'; style-src 'self' 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com; object-src 'none'; frame-src 'self' https://verify.walletconnect.com https://verify.walletconnect.org; frame-ancestors 'self' https://app.safe.global; connect-src 'self' *; img-src 'self' data: blob: *;

Original file line number	Diff line number	Diff line change
`@@ -1,2 +1,2 @@`
`1`	`1`	`/*`
`2`		`- Content-Security-Policy: default-src 'self' https://delegate.ens.domains https://.multi-delegate.pages.dev https://multi-delegate.pages.dev; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com; object-src 'none'; frame-src 'self' https://verify.walletconnect.com https://verify.walletconnect.org; frame-ancestors 'self' https://app.safe.global; connect-src 'self' ; img-src 'self' data: blob: *;`
	`2`	`+ Content-Security-Policy: default-src 'self' https://delegate.ens.domains https://.multi-delegate.pages.dev https://multi-delegate.pages.dev; script-src 'self'; style-src 'self' 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com; object-src 'none'; frame-src 'self' https://verify.walletconnect.com https://verify.walletconnect.org; frame-ancestors 'self' https://app.safe.global; connect-src 'self' ; img-src 'self' data: blob: *;`