Update .htaccess

nasrulhazim · Dec 2, 2024 · 5f19e42 · 5f19e42
1 parent bc79b09
commit 5f19e42
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/public/.htaccess b/public/.htaccess
@@ -9,7 +9,7 @@ Options -Indexes
 
 <IfModule mod_headers.c>
     # Content Security Policy (CSP)
-    Header set Content-Security-Policy "default-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self'; object-src 'none'"
+    Header set Content-Security-Policy "default-src 'self'; img-src 'self' data: https://ui-avatars.com; style-src 'self' 'unsafe-inline' https://fonts.bunny.net; font-src 'self' https://fonts.bunny.net; script-src 'self' 'unsafe-eval'; object-src 'none';"
 
     # X-Content-Type-Options
     Header set X-Content-Type-Options "nosniff"