Update Content Security Policy to allow fonts from fonts.gstatic.com

techulus · Jan 3, 2025 · 5b6a960 · 5b6a960
1 parent 334d451
commit 5b6a960
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/apps/web/next.config.js b/apps/web/next.config.js
@@ -4,7 +4,7 @@ const ContentSecurityPolicy = `
   script-src 'self' 'unsafe-eval' 'unsafe-inline' *;
   style-src 'self' data: 'unsafe-inline' maxcdn.bootstrapcdn.com cdn.jsdelivr.net cdn.zapier.com fonts.googleapis.com;
   img-src 'self' * data: blob:;
-  font-src 'self' data: maxcdn.bootstrapcdn.com cdn.jsdelivr.net;
+  font-src 'self' data: maxcdn.bootstrapcdn.com cdn.jsdelivr.net fonts.gstatic.com;
   connect-src 'self' wss: *.supabase.co *.changes.page manageprompt.com zapier.com *.zapier.com www.google.com;
   worker-src 'self' blob:;
   report-to default