From f3c3fd169370f6245b6d4b2feb88183345c37001 Mon Sep 17 00:00:00 2001 From: Ravi Lodhi <ravi.lodhi@hotwaxsystems.com> Date: Fri, 22 Nov 2024 11:41:57 +0530 Subject: [PATCH] Fixed: Updated security policy header to allow loading scripts related to FCM (#104). --- firebase.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/firebase.json b/firebase.json index b7c2d0fe..d2c72f29 100644 --- a/firebase.json +++ b/firebase.json @@ -20,7 +20,7 @@ }, { "key": "Content-Security-Policy", - "value": "default-src 'self';font-src 'self' data: *;script-src 'self' 'unsafe-inline' 'unsafe-eval' fonts.googleapis.com;img-src 'self' 'unsafe-inline' *.shopify.com javascript: ;style-src 'self' 'unsafe-inline' *; connect-src 'self' *" + "value": "default-src 'self';font-src 'self' data: *;script-src 'self' 'unsafe-inline' 'unsafe-eval' fonts.googleapis.com https://www.gstatic.com;img-src 'self' 'unsafe-inline' *.shopify.com javascript: ;style-src 'self' 'unsafe-inline' *;connect-src 'self' *" }, { "key": "strict-transport-security", @@ -51,7 +51,7 @@ }, { "key": "Content-Security-Policy", - "value": "default-src 'self';font-src 'self' data: *;script-src 'self' 'unsafe-inline' 'unsafe-eval' fonts.googleapis.com;img-src 'self' 'unsafe-inline' *.shopify.com javascript: ;style-src 'self' 'unsafe-inline' *; connect-src 'self' *" + "value": "default-src 'self';font-src 'self' data: *;script-src 'self' 'unsafe-inline' 'unsafe-eval' fonts.googleapis.com https://www.gstatic.com;img-src 'self' 'unsafe-inline' *.shopify.com javascript: ;style-src 'self' 'unsafe-inline' *;connect-src 'self' *" }, { "key": "strict-transport-security", @@ -82,7 +82,7 @@ }, { "key": "Content-Security-Policy", - "value": "default-src 'self';font-src 'self' data: *;script-src 'self' 'unsafe-inline' 'unsafe-eval' fonts.googleapis.com;img-src 'self' 'unsafe-inline' *.shopify.com javascript: ;style-src 'self' 'unsafe-inline' *; connect-src 'self' *" + "value": "default-src 'self';font-src 'self' data: *;script-src 'self' 'unsafe-inline' 'unsafe-eval' fonts.googleapis.com https://www.gstatic.com;img-src 'self' 'unsafe-inline' *.shopify.com javascript: ;style-src 'self' 'unsafe-inline' *;connect-src 'self' *" }, { "key": "strict-transport-security",