From 7c1db72f08b7fd19c11cd7d2a2b9897f40e10a3c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?H=C3=A9ctor=20Molinero=20Fern=C3=A1ndez?=
 <hector@molinero.dev>
Date: Sun, 1 Sep 2024 20:41:03 +0200
Subject: [PATCH] Harden CSP

---
 demo/index.html | 17 ++++++++++-------
 1 file changed, 10 insertions(+), 7 deletions(-)

diff --git a/demo/index.html b/demo/index.html
index 4c5a9de..7358022 100644
--- a/demo/index.html
+++ b/demo/index.html
@@ -6,13 +6,16 @@
     <meta
       http-equiv="Content-Security-Policy"
       content="
-      default-src 'none';
-      connect-src 'self';
-      font-src 'self';
-      img-src 'self' data:;
-      manifest-src 'self';
-      script-src 'self' 'sha384-XiiRgIf5zQ4bHRD8h77lp8w+PAEkizITuBcqxsfIJIHIN8EPq6rX/IXz7CzbJ8/v' https://cdnjs.cloudflare.com/ajax/libs/bootstrap/;
-      style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com/ajax/libs/bootstrap/;"
+        default-src 'none';
+        font-src 'self';
+        img-src 'self' data:;
+        connect-src 'self';
+        worker-src 'self';
+        manifest-src 'self';
+        script-src-elem 'self' 'sha384-XiiRgIf5zQ4bHRD8h77lp8w+PAEkizITuBcqxsfIJIHIN8EPq6rX/IXz7CzbJ8/v' https://cdnjs.cloudflare.com/ajax/libs/bootstrap/;
+        style-src-elem 'self' 'sha384-fBcH0D+Mqn9267xWkqPrzMtuvPgtFK1cASMy5Vv+yDN3NHJTl/obqWjRw0Hk4PqU' https://cdnjs.cloudflare.com/ajax/libs/bootstrap/;
+        style-src-attr 'unsafe-inline';
+      "
     />
 
     <title>ANSI-o-Matic</title>