chore(site): tweaks CSP

sverweij · Dec 24, 2024 · f3a2a0a · f3a2a0a
1 parent 1dedd4d
commit f3a2a0a
Show file tree

Hide file tree

Showing 4 changed files with 8 additions and 10 deletions.
diff --git a/docs/index.hbs b/docs/index.hbs
@@ -13,10 +13,9 @@
       manifest-src 'self';
       media-src 'none';
       object-src 'none';
-      script-src 'self' 'unsafe-eval' https://code.getmdl.io/1.3.0/material.min.js;
+      script-src 'self' 'unsafe-eval' 'nonce-known-inline-script' https://code.getmdl.io/1.3.0/material.min.js;
       style-src 'unsafe-inline' https://fonts.googleapis.com/icon https://code.getmdl.io/1.3.0/material.purple-pink.min.css;
-      form-action 'none';
-      navigate-to 'none'"
+      form-action 'none'"
   />
   <link rel="stylesheet" href="https://fonts.googleapis.com/icon?family=Material+Icons">
   <link rel="stylesheet" href="{{materialTheme}}">

diff --git a/docs/index.html b/docs/index.html
@@ -13,10 +13,9 @@
       manifest-src 'self';
       media-src 'none';
       object-src 'none';
-      script-src 'self' 'unsafe-eval' https://code.getmdl.io/1.3.0/material.min.js;
+      script-src 'self' 'unsafe-eval' 'nonce-known-inline-script' https://code.getmdl.io/1.3.0/material.min.js;
       style-src 'unsafe-inline' https://fonts.googleapis.com/icon https://code.getmdl.io/1.3.0/material.purple-pink.min.css;
-      form-action 'none';
-      navigate-to 'none'"
+      form-action 'none'"
   />
   <link rel="stylesheet" href="https://fonts.googleapis.com/icon?family=Material+Icons">
   <link rel="stylesheet" href="https://code.getmdl.io/1.3.0/material.purple-pink.min.css">

diff --git a/docs/inpage.hbs b/docs/inpage.hbs
@@ -1,3 +1,4 @@
+<!DOCTYPE html>
 <html lang="en">
   <head>
     <meta charset="UTF-8" />
@@ -16,8 +17,7 @@
         object-src 'none';
         script-src 'self' 'unsafe-eval';
         style-src 'unsafe-inline';
-        form-action 'none';
-        navigate-to 'none'"
+        form-action 'none'"
     />
     <script
       src="{{sourceFile}}"

diff --git a/docs/inpage.html b/docs/inpage.html
@@ -1,3 +1,4 @@
+<!DOCTYPE html>
 <html lang="en">
   <head>
     <meta charset="UTF-8" />
@@ -16,8 +17,7 @@
         object-src 'none';
         script-src 'self' 'unsafe-eval';
         style-src 'unsafe-inline';
-        form-action 'none';
-        navigate-to 'none'"
+        form-action 'none'"
     />
     <script
       src="state-machine-cat-inpage.min.js"