prevent inline styles

MPIB · Mar 31, 2021 · 1e7845f · 1e7845f
1 parent d2060da
commit 1e7845f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/templates/base.html b/templates/base.html
@@ -4,7 +4,7 @@
     <meta charset="utf-8"/>
     <meta http-equiv="Content-Security-Policy" content="default-src 'self';
         script-src 'self' 'unsafe-inline' 'unsafe-eval';
-        style-src 'self' 'unsafe-inline' http://fonts.googleapis.com https://fonts.googleapis.com;
+        style-src 'self' http://fonts.googleapis.com https://fonts.googleapis.com;
         connect-src 'self' https://localhost:41951 https://127.0.0.1:41951;
         font-src 'self' http://fonts.gstatic.com https://fonts.gstatic.com;
         img-src 'self' data:; ">