From a4ca830cf7dda9103208ab3b42c7af86b97c3778 Mon Sep 17 00:00:00 2001 From: collin Date: Mon, 20 Apr 2026 22:48:42 +0200 Subject: [PATCH] Changing CSP to be for default-src --- controller.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/controller.go b/controller.go index 0736c21..984ceac 100644 --- a/controller.go +++ b/controller.go @@ -30,7 +30,7 @@ func getStaticFile(relPath string, contentType string, w http.ResponseWriter) { } w.Header().Add("Content-Type", contentType) - w.Header().Add("Content-Security-Policy", "default-src 'self'; frame-src: 'self' openstreetmap.org") + w.Header().Add("Content-Security-Policy", "default-src 'self' openstreetmap.org;") w.WriteHeader(http.StatusOK) w.Write(file) }