diff --git a/static/staticwebapp.config.json b/static/staticwebapp.config.json index 0502cff..0288347 100644 --- a/static/staticwebapp.config.json +++ b/static/staticwebapp.config.json @@ -1,8 +1,9 @@ { - "globalHeaders": { - "Content-Type": "text/html; charset=UTF-8", - "Permissions-Policy": "geolocation=(), microphone=(), camera=()", - "X-Frame-Options": "SAMEORIGIN", - "X-Permitted-Cross-Domain-Policies": "none" - } + "globalHeaders": { + "Content-Type": "text/html; charset=UTF-8", + "Content-Security-Policy": "script-src 'self' 'unsafe-eval' 'unsafe-inline'", + "Permissions-Policy": "geolocation=(), microphone=(), camera=()", + "X-Frame-Options": "SAMEORIGIN", + "X-Permitted-Cross-Domain-Policies": "none" + } }