Loosten CSP restrictions

hugo · Feb 25, 2017 · 167a214 · 167a214
1 parent bf3370e
commit 167a214
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/_headers b/_headers
@@ -1,6 +1,6 @@
 /*
   X-Frame-Options: DENY
   X-XSS-Protection: 1; mode=block
-  Content-Security-Policy: default-src 'self';
+  Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:;
   X-Content-Type-Options: nosniff
   Referrer-Policy: strict-origin