configured content-security-policy correctly for sandbox

Signed-off-by: Thomas Jaeckle <thomas.jaeckle@bosch.io>
eclipse-ditto · Dec 7, 2022 · 18c37ed · 18c37ed
1 parent 68878f6
commit 18c37ed
Show file tree

Hide file tree

Showing 3 changed files with 2 additions and 4 deletions.
diff --git a/deployment/docker/sandbox/html/index.html b/deployment/docker/sandbox/html/index.html
@@ -7,7 +7,6 @@
     <link rel="icon" type="image/png" href="./images/favicon-32x32.png" sizes="32x32"/>
     <link rel="icon" type="image/png" href="./images/favicon-96x96.png" sizes="96x96"/>
 
-    <link href="https://fonts.googleapis.com/css?family=Abel&amp;text=0123456789" rel="stylesheet">
     <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.4/jquery.min.js"></script>
 
     <style>
@@ -43,7 +42,7 @@
         }
 
         .stats-count {
-            font: normal 2em Abel;
+            font: normal 2em SansSerif;
             color: #3a8c9a;
             font-weight: bold;
             text-align: center;

diff --git a/deployment/docker/sandbox/nginx.conf b/deployment/docker/sandbox/nginx.conf
@@ -143,7 +143,7 @@ http {
 
     # security relevant headers:
     add_header Strict-Transport-Security "max-age=63072000; includeSubdomains;";
-    add_header Content-Security-Policy "default-src 'self';" always;
+    add_header Content-Security-Policy "default-src 'self'; script-src 'self' cdnjs.cloudflare.com;" always;
     expires 1y;
     add_header Cache-Control "public, no-transform";
     add_header X-Content-Type-Options nosniff;

diff --git a/deployment/docker/swagger3-index.html b/deployment/docker/swagger3-index.html
@@ -4,7 +4,6 @@
 <head>
     <meta charset="UTF-8">
     <title>Eclipse Ditto - HTTP API</title>
-    <link href="https://fonts.googleapis.com/css?family=Open+Sans:400,700|Source+Code+Pro:300,600|Titillium+Web:400,600,700" rel="stylesheet">
     <link rel="stylesheet" type="text/css" href="./swagger-ui.css" >
     <link rel="icon" type="image/png" href="./images/favicon-16x16.png" sizes="16x16" />
     <link rel="icon" type="image/png" href="./images/favicon-32x32.png" sizes="32x32" />