wyl/hertzbeat
1
0
Fork 0
mirror of https://github.com/dromara/hertzbeat.git synced 2026-09-17 09:40:58 +00:00
Code Issues Projects Releases Wiki Activity

[fix]: update Content Security Policy in .htaccess to include new domains (#3979)

Browse Source
This commit is contained in:
Logic
2026-01-16 20:53:11 +08:00
committed by GitHub
parent cc90de5541
commit 43332f49db
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
home/static/.htaccess
+3 -2
View File
@@ -1,2 +1,3 @@
# CSP permissions for hertzbeat.apache.org - Adding 3rd party service Algolia & Kapa.ai
SetEnv CSP_PROJECT_DOMAINS "https://*.algolia.net/ https://*.algolianet.com/ https://*.algolia.io/ https://widget.kapa.ai https://proxy.kapa.ai https://kapa-widget-proxy-la7dkmplpq-uc.a.run.app https://metrics.kapa.ai https://www.google.com/recaptcha/ https://hcaptcha.com https://*.hcaptcha.com"
<IfModule mod_headers.c>
Header set Content-Security-Policy "default-src data: blob: 'self' *.apache.org *.kapa.ai *.githubusercontent.com *.googleapis.com *.google.com *.run.app *.gstatic.com *.github.com https://hcaptcha.com https://*.hcaptcha.com *.algolia.net *.algolianet.com *.apachecon.com *.communityovercode.org 'unsafe-inline' 'unsafe-eval'; frame-src *; frame-ancestors 'self' *.google.com; worker-src 'self' data: blob:; img-src 'self' blob: data: https:; font-src 'self' data: blob:; object-src 'none'"
</IfModule>