diff --git a/lib/towerops_web/plugs/security_headers.ex b/lib/towerops_web/plugs/security_headers.ex index ff01c0da..cb3c0e8d 100644 --- a/lib/towerops_web/plugs/security_headers.ex +++ b/lib/towerops_web/plugs/security_headers.ex @@ -27,11 +27,11 @@ defmodule ToweropsWeb.Plugs.SecurityHeaders do Enum.join( [ "default-src 'self' data:", - "script-src 'self' 'unsafe-inline' https://a.w5isp.com", - "style-src 'self' 'unsafe-inline' 'unsafe-hashes'", + "script-src 'self' 'unsafe-inline' https://a.w5isp.com https://unpkg.com", + "style-src 'self' 'unsafe-inline' 'unsafe-hashes' https://unpkg.com", "img-src 'self' data: https:", "font-src 'self' data:", - "connect-src 'self' ws: wss: https://a.w5isp.com", + "connect-src 'self' ws: wss: https://a.w5isp.com https://*.tile.openstreetmap.org", "frame-ancestors 'none'" ], "; "