From 3ddb2871879c872c412cedf954ef4c53971dd1a0 Mon Sep 17 00:00:00 2001 From: Claudio Ortolina Date: Mon, 9 Mar 2026 18:30:29 +0000 Subject: [PATCH] Fix csp directives for online store template logos --- lib/music_library_web/router.ex | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/lib/music_library_web/router.ex b/lib/music_library_web/router.ex index c3ee9ecf..45efe8a1 100644 --- a/lib/music_library_web/router.ex +++ b/lib/music_library_web/router.ex @@ -10,7 +10,9 @@ defmodule MusicLibraryWeb.Router do # Last.fm CDN, Brave Search, and Cover Art Archive, and prevents framing. # In dev, allows LiveDebugger and Phoenix dev assets from 127.0.0.1. @dev_origins if(Mix.env() == :dev, do: " http://127.0.0.1:* ws://127.0.0.1:*", else: "") - @img_origins "https://lastfm.freetls.fastly.net https://imgs.search.brave.com https://coverartarchive.org https://archive.org https://*.archive.org" + @img_origins "https://lastfm.freetls.fastly.net https://imgs.search.brave.com " <> + "https://coverartarchive.org https://archive.org " <> + "https://*.archive.org https://www.google.com https://*.gstatic.com" @csp_policy "default-src 'self'" <> "; script-src 'self' 'unsafe-inline'#{@dev_origins}" <>