signal-works/ice
1
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

Fix CSP to allow Leaflet marker icons from unpkg.com

Browse source 
- Updated Content-Security-Policy img-src directive to include unpkg.com
- Resolves CSP violation preventing Leaflet marker icons from loading
- Maintains security while allowing necessary external image resources
This commit is contained in:
Deco Vander 2025-07-03 01:24:51 -04:00
parent a3b450de1a
commit 12fd378e8c
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
scripts/Caddyfile
View file

@ -35,7 +35,7 @@ yourdomain.com {
# Referrer policy
Referrer-Policy strict-origin-when-cross-origin
# Content Security Policy
Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' unpkg.com api.mapbox.com; style-src 'self' 'unsafe-inline' unpkg.com; img-src 'self' data: *.tile.openstreetmap.org; connect-src 'self' api.mapbox.com nominatim.openstreetmap.org"
Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' unpkg.com api.mapbox.com; style-src 'self' 'unsafe-inline' unpkg.com; img-src 'self' data: *.tile.openstreetmap.org unpkg.com; connect-src 'self' api.mapbox.com nominatim.openstreetmap.org"
}
# Gzip compression