feat: adding manifest-src to csp

Markkos89 · Sep 3, 2023 · 5ffbbfa · 5ffbbfa
1 parent 4fba385
commit 5ffbbfa
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/packages/utils/src/csp/index.ts b/packages/utils/src/csp/index.ts
@@ -67,6 +67,7 @@ const cspDev = {
   "img-src": ["'self'"],
   "script-src": ["'self'", "'unsafe-eval'", "'unsafe-inline'"],
   "style-src": ["'self'", "'unsafe-inline'"],
+  "manifest-src": ["'self'"],
 } satisfies CspDirectives;
 
 const nextThemesHash = "'sha256-eMuh8xiwcX72rRYNAGENurQBAcH7kLlAUQcoOri3BIo='";
@@ -80,6 +81,7 @@ const cspProd = {
   "img-src": ["'self'"],
   "script-src": ["'self'", nextThemesHash],
   "style-src": ["'self'", "'unsafe-inline'"],
+  "manifest-src": ["'self'"],
 } satisfies CspDirectives;
 
 export const getCspContent = (inlineScript: string): string => {