add unpkg.com to disallowed hostnames in CSP (#3927)

Co-authored-by: Jeroen Dekkers <[email protected]>
minvws · Dec 4, 2024 · d3ef9a6 · d3ef9a6
1 parent 86bb96f
commit d3ef9a6
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/octopoes/bits/ask_disallowed_domains/question_schema.json b/octopoes/bits/ask_disallowed_domains/question_schema.json
@@ -9,7 +9,7 @@
       "description": "Comma separated list of disallowed hostnames in CSP headers",
       "type": "string",
       "pattern": "^(\\s*(,*)[^,]+,?\\s*)*$",
-      "default": "githubpages.com,github.io,jsdelivr.com,cdn.skypack.dev"
+      "default": "githubpages.com,github.io,jsdelivr.com,cdn.skypack.dev,unpkg.com"
     },
     "disallow_url_shorteners": {
       "description": "Do you want to disallow url shorteners in csp headers?",