relax csp for styles and connect urls

ohcnetwork · Jan 24, 2024 · ad0cd8b · ad0cd8b
1 parent b32691d
commit ad0cd8b
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/netlify.toml b/netlify.toml
@@ -27,8 +27,8 @@ status = 200
     Content-Security-Policy = '''
       default-src 'self';
       script-src 'self' 'nonce-f51b9742' https://plausible.10bedicu.in;
-      style-src 'self' 'nonce-7e14cf80';
-      connect-src 'self' ws: wss: https://sentry.io https://plausible.10bedicu.in https://api.data.gov.in https://egov-s3-facility-10bedicu.s3.amazonaws.com https://egov-s3-patient-data-10bedicu.s3.amazonaws.com;
+      style-src 'self' 'unsafe-inline';
+      connect-src *;
       img-src 'self' blob: data: https://cdn.coronasafe.network https://egov-s3-facility-10bedicu.s3.amazonaws.com https://egov-s3-patient-data-10bedicu.s3.amazonaws.com;
       media-src 'self' blob: data: https://cdn.coronasafe.network https://egov-s3-facility-10bedicu.s3.amazonaws.com https://egov-s3-patient-data-10bedicu.s3.amazonaws.com;
       object-src 'self' blob: https://egov-s3-facility-10bedicu.s3.amazonaws.com https://egov-s3-patient-data-10bedicu.s3.amazonaws.com;