feat: CSP 'font-src' tweak (add 'data:') (#232)

openziti · Nov 20, 2024 · 4d8decd · 4d8decd
1 parent 5151296
commit 4d8decd
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/src/ZitiFirstStrategy.ts b/src/ZitiFirstStrategy.ts
@@ -222,6 +222,12 @@ class ZitiFirstStrategy extends CacheFirst /* NetworkFirst */ {
       origCSP['img-src'].push(`*`);
     }
 
+    if (origCSP['font-src']) {
+      if (!origCSP['font-src'].includes("data:")) {
+        origCSP['font-src'].push("data:");
+      }
+    }
+
     let directives:any = {}
     if (!isUndefined(origCSP['child-src']))       { directives.childSrc       = origCSP['child-src'];}
     if (!isUndefined(origCSP['connect-src']))     { directives.connectSrc     = origCSP['connect-src'];}