whitelist fonts

Signed-off-by: ayush-billore <[email protected]>
chef · Dec 8, 2023 · fabf5d1 · fabf5d1
1 parent 1093075
commit fabf5d1
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/supermarket/config/initializers/content_security_policy.rb b/src/supermarket/config/initializers/content_security_policy.rb
@@ -6,7 +6,7 @@
 
 Rails.application.config.content_security_policy do |policy|
   policy.default_src :self, :https
-  policy.font_src :self, :https, :data
+  policy.font_src :self, :https, :data, "http://fonts.gstatic.com"
   policy.img_src :self, :https, :data, "www.googletagmanager.com"
   policy.script_src :self, :https, "https://www.googletagmanager.com", "https://www.google-analytics.com", "http://cdn.segment.com"
   policy.object_src :none