cloud/music_library
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix csp directives for online store template logos

Browse Source
This commit is contained in:
Claudio Ortolina
2026-03-09 18:30:29 +00:00
parent 93aed6c310
commit 3ddb287187
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
lib/music_library_web/router.ex
+3 -1
View File
@@ -10,7 +10,9 @@ defmodule MusicLibraryWeb.Router do
# Last.fm CDN, Brave Search, and Cover Art Archive, and prevents framing. # Last.fm CDN, Brave Search, and Cover Art Archive, and prevents framing.
# In dev, allows LiveDebugger and Phoenix dev assets from 127.0.0.1. # In dev, allows LiveDebugger and Phoenix dev assets from 127.0.0.1.
@dev_origins if(Mix.env() == :dev, do: " http://127.0.0.1:* ws://127.0.0.1:*", else: "") @dev_origins if(Mix.env() == :dev, do: " http://127.0.0.1:* ws://127.0.0.1:*", else: "")
@img_origins "https://lastfm.freetls.fastly.net https://imgs.search.brave.com https://coverartarchive.org https://archive.org https://*.archive.org" @img_origins "https://lastfm.freetls.fastly.net https://imgs.search.brave.com " <>
"https://coverartarchive.org https://archive.org " <>
"https://*.archive.org https://www.google.com https://*.gstatic.com"
@csp_policy "default-src 'self'" <> @csp_policy "default-src 'self'" <>
"; script-src 'self' 'unsafe-inline'#{@dev_origins}" <> "; script-src 'self' 'unsafe-inline'#{@dev_origins}" <>