05/06 admin login css issues

2026-05-06 17:09:55 -04:00
parent 51adb47da8
commit 04aae8bf5d
3 changed files with 7 additions and 6 deletions
@@ -34,8 +34,9 @@ def apply_security_headers(app):
        # Basic CSP — tightened further in Nginx for production
        response.headers["Content-Security-Policy"] = (
            "default-src 'self'; "
-            "script-src 'self'; "
-            "style-src 'self' 'unsafe-inline'; "
+            "script-src 'self' https://cdn.jsdelivr.net; "
+            "style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; "
+            "font-src 'self' https://cdn.jsdelivr.net; "
            "img-src 'self' data:; "
            "frame-ancestors 'none';"
        )