fix(firebase): csp connect-src and prefetch-src udpate

sws2apps · Sep 10, 2022 · e95d64c · e95d64c
1 parent b018d73
commit e95d64c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/firebase.json b/firebase.json
@@ -15,7 +15,7 @@
     "headers": [{
       "source": "**",
       "headers": [
-        { "key": "Content-Security-Policy", "value": "default-src 'self'; img-src 'self' data:; script-src 'self' https://fpnpmcdn.net; connect-src 'self' data: https://alpha-sws2apps-api.onrender.com https://*.fpapi.io https://api.fpjs.io; prefetch-src https://*.fpapi.io https://api.fpjs.io; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; base-uri 'self'; form-action 'self'; object-src 'none'; frame-ancestors 'none'" },
+        { "key": "Content-Security-Policy", "value": "default-src 'self'; img-src 'self' data:; script-src 'self' https://fpnpmcdn.net; connect-src 'self' data: https://alpha-sws2apps-api.onrender.com https://*.fpapi.io https://api.fpjs.io o https://*.fptls.com; prefetch-src https://*.fpapi.io https://api.fpjs.io https://*.fptls.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; base-uri 'self'; form-action 'self'; object-src 'none'; frame-ancestors 'none'" },
         { "key": "Cache-Control", "value": "no-cache" },
         { "key": "X-Content-Type-Options", "value": "nosniff" },
         { "key": "X-Frame-Options", "value": "DENY" },