Update CSP for report ony

significa · Sep 18, 2024 · dd632e8 · dd632e8
1 parent 06f6db5
commit dd632e8
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/vercel.json b/vercel.json
@@ -12,11 +12,11 @@
         },
         {
           "key": "Content-Security-Policy",
-          "value": "default-src *; script-src *; img-src *; media-src 'self'; object-src *; child-src 'none'; frame-ancestors https://app.storyblok.com"
+          "value": "frame-ancestors https://app.storyblok.com; upgrade-insecure-requests"
         },
         {
           "key": "Content-Security-Policy-Report-Only",
-          "value": "default-src *; script-src *; img-src 'self'; media-src 'self'; object-src *; child-src 'none'; frame-ancestors https://app.storyblok.com; report-uri https://exgb4n9a.uriports.com/reports/report; report-to default"
+          "value": "script-src * 'unsafe-inline'; script-src-attr 'none'; img-src 'self' *.storyblok.com; media-src 'self' *.storyblok.com; object-src *; child-src 'none'; frame-ancestors https://app.storyblok.com; report-uri https://exgb4n9a.uriports.com/reports/report; report-to default"
         },
         {
           "key": "X-Content-Type-Options",