fix(simulator-ui): content policy for inline fonts

citrusframework · May 14, 2024 · 0365b7b · 0365b7b
1 parent d3a82da
commit 0365b7b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/...main/java/org/citrusframework/simulator/ui/config/SimulatorUiConfigurationProperties.java b/...main/java/org/citrusframework/simulator/ui/config/SimulatorUiConfigurationProperties.java
@@ -43,7 +43,7 @@ public void setSecurity(Security security) {
 
     public static class Security {
 
-        private static final String DEFAULT_CONTENT_SECURITY_POLICY = "default-src 'self'; frame-src 'self' data:;";
+        private static final String DEFAULT_CONTENT_SECURITY_POLICY = "default-src 'self'; frame-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self' data:";
         private String contentSecurityPolicy = DEFAULT_CONTENT_SECURITY_POLICY;
 
         public String getContentSecurityPolicy() {