fix: allow fonts and style from googleapis

bcgov · Feb 19, 2025 · 5623596 · 5623596
1 parent 0a1c962
commit 5623596
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/app.js b/app/app.js
@@ -30,7 +30,7 @@ const app = express();
 
 // Set the CSP header so that external media cannot be displayed in the forms.
 app.use((_req, res, next) => {
-  res.setHeader('Content-Security-Policy', "default-src 'self'; font-src 'self'");
+  res.setHeader('Content-Security-Policy', "default-src 'self'; font-src 'self' https://fonts.gstatic.com; style-src 'self' https://fonts.googleapis.com");
   next();
 });