From fa30404048c0f30a92806e46b855a244d2a8da0a Mon Sep 17 00:00:00 2001 From: Mar0xy Date: Sun, 24 Sep 2023 22:13:20 +0200 Subject: [PATCH] upd: header --- .../src/server/api/mastodon/MastodonApiServerService.ts | 9 +-------- 1 file changed, 1 insertion(+), 8 deletions(-) diff --git a/packages/backend/src/server/api/mastodon/MastodonApiServerService.ts b/packages/backend/src/server/api/mastodon/MastodonApiServerService.ts index d390597216..7c1a407c55 100644 --- a/packages/backend/src/server/api/mastodon/MastodonApiServerService.ts +++ b/packages/backend/src/server/api/mastodon/MastodonApiServerService.ts @@ -41,14 +41,7 @@ export class MastodonApiServerService { }); fastify.addHook('onRequest', (request, reply, done) => { - reply.header('Content-Security-Policy', `default-src * data: mediastream: blob: filesystem: about: ws: wss: 'unsafe-eval' 'wasm-unsafe-eval' 'unsafe-inline'; - script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; - connect-src * data: blob: 'unsafe-inline'; - img-src * data: blob: 'unsafe-inline'; - frame-src * data: blob: ; - style-src * data: blob: 'unsafe-inline'; - font-src * data: blob: 'unsafe-inline'; - frame-ancestors * data: blob: 'unsafe-inline';`); + reply.header('Access-Control-Allow-Origin', '*'); done(); });