From 1ec4cae7560f92624a86ee4092328c70cdb98b8a Mon Sep 17 00:00:00 2001
From: Cameron Otsuka <cameron@otsuka.haus>
Date: Tue, 29 Oct 2024 15:13:32 -0700
Subject: [PATCH] only allow https in csp

---
 _includes/layouts/base.njk | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/_includes/layouts/base.njk b/_includes/layouts/base.njk
index cecc4b0..8b70586 100644
--- a/_includes/layouts/base.njk
+++ b/_includes/layouts/base.njk
@@ -8,7 +8,7 @@
     {%- endif %}
     <meta charset="utf-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta http-equiv="Content-Security-Policy" content="default-src 'self' 'unsafe-inline'; frame-src 'none'" />
+    <meta http-equiv="Content-Security-Policy" content="default-src  https: 'self'; frame-src 'none'" />
     <meta name="title" property="og:title" content="{{ title }}" />
     <meta name="description" property="og:description" content="{{ description or metadata.description }}" />
     <meta name="author" content="{{ metadata.author.name }}" />
-- 
2.51.0