cloud/music_library
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update CSP policies for musicbrainz covers + fallbacks

Browse Source
This commit is contained in:
Claudio Ortolina
2026-03-08 19:54:00 +00:00
parent 27519fca29
commit 77c45bddc6
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
lib/music_library_web/router.ex
+3 -3
View File
@@ -12,10 +12,10 @@ defmodule MusicLibraryWeb.Router do
@dev_origins if(Mix.env() == :dev, do: " http://127.0.0.1:* ws://127.0.0.1:*", else: "")
@csp_policy "default-src 'self'" <>
"; script-src 'self'#{@dev_origins}" <>
"; script-src 'self' 'unsafe-inline'#{@dev_origins}" <>
"; style-src 'self' 'unsafe-inline' https://rsms.me#{@dev_origins}" <>
"; font-src 'self' https://rsms.me" <>
"; img-src 'self' data: https://lastfm.freetls.fastly.net https://imgs.search.brave.com" <>
"; img-src 'self' data: https://lastfm.freetls.fastly.net https://imgs.search.brave.com https://coverartarchive.org https://archive.org https://*.archive.org" <>
"; connect-src 'self'#{@dev_origins}" <>
"; frame-ancestors 'self'" <>
"; base-uri 'self'"
@@ -183,7 +183,7 @@ defmodule MusicLibraryWeb.Router do
"; script-src 'self' 'nonce-#{nonce}'" <>
"; style-src 'self' 'unsafe-inline' 'nonce-#{nonce}' https://rsms.me" <>
"; font-src 'self' data: https://rsms.me" <>
"; img-src 'self' data: 'nonce-#{nonce}' https://lastfm.freetls.fastly.net https://imgs.search.brave.com" <>
"; img-src 'self' data: 'nonce-#{nonce}' https://lastfm.freetls.fastly.net https://imgs.search.brave.com https://coverartarchive.org https://archive.org https://*.archive.org" <>
"; connect-src 'self'" <>
"; frame-ancestors 'self'" <>
"; base-uri 'self'"