Merge branch 'main' into add-usage-type-to-get-reports

greenbone · May 13, 2024 · 7a6e333 · 7a6e333
2 parents 17bad91 + 3df34c8
commit 7a6e333
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/src/gsad.c b/src/gsad.c
@@ -163,10 +163,12 @@
   "base-uri 'none'; "                        \
   "connect-src 'self'; "                     \
   "script-src 'self'; "                      \
+  "script-src-elem 'self' 'unsafe-inline';"  \
   "frame-ancestors 'none'; "                 \
   "form-action 'self'; "                     \
   "style-src-elem 'self' 'unsafe-inline'; "  \
   "style-src 'self' 'unsafe-inline'; "       \
+  "font-src 'self';"                         \
   "img-src 'self' blob:;"
 
 /**

diff --git a/src/gsad_http_handler.c b/src/gsad_http_handler.c
@@ -769,6 +769,7 @@ make_url_handlers ()
   url_handler_add_func (url_handlers, "^/robots\\.txt$", handle_static_file);
 
   url_handler_add_func (url_handlers, "^/config\\.*js$", handle_static_config);
+  url_handler_add_func (url_handlers, "^/assets/.+$", handle_static_file);
   url_handler_add_func (url_handlers, "^/static/(img|js|css|media)/.+$",
                         handle_static_file);
   url_handler_add_func (url_handlers, "^/manual/.+$", handle_static_file);