From 45bd910db6591e6ee22f86502b5610757cae56f3 Mon Sep 17 00:00:00 2001 From: Livio Amstutz Date: Tue, 23 Jun 2020 08:43:41 +0200 Subject: [PATCH] fix(console): add style / font src hosts to connect src (#259) --- pkg/console/console.go | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/pkg/console/console.go b/pkg/console/console.go index e7de09fb3..f0cb779ba 100644 --- a/pkg/console/console.go +++ b/pkg/console/console.go @@ -65,7 +65,10 @@ func csp(zitadelDomain string) *middleware.CSP { csp.StyleSrc = csp.StyleSrc.AddInline().AddHost("fonts.googleapis.com").AddHost("maxst.icons8.com") //TODO: host it csp.FontSrc = csp.FontSrc.AddHost("fonts.gstatic.com").AddHost("maxst.icons8.com") //TODO: host it csp.ScriptSrc = csp.ScriptSrc.AddEval() - csp.ConnectSrc = csp.ConnectSrc.AddHost(zitadelDomain) + csp.ConnectSrc = csp.ConnectSrc.AddHost(zitadelDomain). + AddHost("fonts.googleapis.com"). + AddHost("fonts.gstatic.com"). + AddHost("maxst.icons8.com") //TODO: host it return &csp }