From 7f36ff9e96b5ff094de68239e3ae7aa1757297a8 Mon Sep 17 00:00:00 2001
From: saiminh <saiminh@gmail.com>
Date: Mon, 30 Oct 2023 17:36:19 +0100
Subject: [PATCH] move directives to svelte config

---
 netlify.toml     | 3 +--
 svelte.config.js | 2 ++
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/netlify.toml b/netlify.toml
index 86c69f2..e1f7e4c 100644
--- a/netlify.toml
+++ b/netlify.toml
@@ -8,5 +8,4 @@ functions = "functions/"
   [headers.values]
     X-Frame-Options = "SAMEORIGIN"
     X-XSS-Protection = "0"
-    X-Content-Type-Options = "nosniff"
-    Content-Security-Policy = "default-src 'self' *.cloudinary.com  *.typekit.net;"
\ No newline at end of file
+    X-Content-Type-Options = "nosniff"
\ No newline at end of file
diff --git a/svelte.config.js b/svelte.config.js
index 98c8914..2cb0042 100644
--- a/svelte.config.js
+++ b/svelte.config.js
@@ -33,6 +33,8 @@ const config = {
     csp: {
       mode: 'auto',
       directives: {
+        'default-src': ['self', '*.typekit.net'],
+        'img-src': ['self', '*.cloudinary.com', 'data:'],
         'script-src': ['self', 'unsafe-eval', 'unsafe-inline']
       },
     },