fix: lax helmet csp config for styles.

Required to support react-selct, see https://github.com/JedWatson/react-select/issues/2917
2025-01-25 00:07:47 +01:00 · 2020-09-07 09:23:59 +02:00 · 2020-09-07 09:23:59 +02:00 · bf42fa135d
commit bf42fa135d
parent 83e0388520
1 changed files with 7 additions and 0 deletions
--- a/lib/middleware/helmet.js
+++ b/lib/middleware/helmet.js
@ -12,6 +12,13 @@ module.exports = function(config) {
                        'data:',
                        'gravatar.com',
                    ],
+                    styleSrc: [
+                        "'self'",
+                        'fonts.googleapis.com',
+                        'fonts.gstatic.com',
+                        'data:',
+                        'unsafe-inline',
+                    ],
                },
            },
        });