Updated CORS

silverfs · Sep 7, 2024 · 28dfd48 · 28dfd48
1 parent c2593f6
commit 28dfd48
Showing 1 changed file with 3 additions and 4 deletions.
diff --git a/next.config.js b/next.config.js
@@ -7,13 +7,12 @@ const withBundleAnalyzer = require('@next/bundle-analyzer')({
 // You might need to insert additional domains in script-src if you are using external services
 const ContentSecurityPolicy = `
   default-src 'self';
-  script-src 'self' 'unsafe-eval' 'unsafe-inline' giscus.app analytics.umami.is;
+  script-src 'self' 'unsafe-eval' 'unsafe-inline';
   style-src 'self' 'unsafe-inline';
   img-src * blob: data:;
-  media-src *.s3.amazonaws.com;
+  media-src lychee.shiruvaaa.net;
   connect-src *;
   font-src 'self';
-  frame-src giscus.app
 `
 
 const securityHeaders = [
@@ -75,7 +74,7 @@ module.exports = () => {
       remotePatterns: [
         {
           protocol: 'https',
-          hostname: 'picsum.photos',
+          hostname: 'lychee.shiruvaaa.net',
         },
       ],
       unoptimized,