From 0360950eecc3a3feaab2764d92615e0cd3fa6f40 Mon Sep 17 00:00:00 2001 From: Amir Raminfar Date: Fri, 8 May 2020 19:57:34 -0700 Subject: [PATCH] Adds require trusted --- routes.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/routes.go b/routes.go index 13383106..7441bdc4 100644 --- a/routes.go +++ b/routes.go @@ -32,7 +32,7 @@ func createRoutes(base string, h *handler) *mux.Router { func setCSPHeaders(next http.Handler) http.Handler { return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { - w.Header().Set("Content-Security-Policy", "default-src 'none'; script-src 'self'; style-src 'self' fonts.googleapis.com; img-src 'self'; manifest-src 'self'; font-src fonts.gstatic.com; connect-src 'self'") + w.Header().Set("Content-Security-Policy", "default-src 'none'; script-src 'self'; style-src 'self' fonts.googleapis.com; img-src 'self'; manifest-src 'self'; font-src fonts.gstatic.com; connect-src 'self'; require-trusted-types-for 'script'") next.ServeHTTP(w, r) }) }