diff --git a/netlify.toml b/netlify.toml index 86c69f2..e1f7e4c 100644 --- a/netlify.toml +++ b/netlify.toml @@ -8,5 +8,4 @@ functions = "functions/" [headers.values] X-Frame-Options = "SAMEORIGIN" X-XSS-Protection = "0" - X-Content-Type-Options = "nosniff" - Content-Security-Policy = "default-src 'self' *.cloudinary.com *.typekit.net;" \ No newline at end of file + X-Content-Type-Options = "nosniff" \ No newline at end of file diff --git a/svelte.config.js b/svelte.config.js index 98c8914..2cb0042 100644 --- a/svelte.config.js +++ b/svelte.config.js @@ -33,6 +33,8 @@ const config = { csp: { mode: 'auto', directives: { + 'default-src': ['self', '*.typekit.net'], + 'img-src': ['self', '*.cloudinary.com', 'data:'], 'script-src': ['self', 'unsafe-eval', 'unsafe-inline'] }, },