fix(pastes): allow script-src

neurosnap · neurosnap · commit 1f1214adb2bc · 2025-08-02T15:09:20.000-04:00
diff --git a/caddy/Caddyfile b/caddy/Caddyfile
@@ -53,7 +53,7 @@
 		# keep referrer data off of HTTP connections
 		Referrer-Policy no-referrer-when-downgrade
 
-		Content-Security-Policy "default-src 'self'; img-src * 'unsafe-inline'; style-src * 'unsafe-inline'"
+		Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; img-src * 'unsafe-inline'; style-src * 'unsafe-inline'
 
 		X-XSS-Protection "1; mode=block"
 	}

Original file line number	Diff line number	Diff line change
`@@ -53,7 +53,7 @@`
`53`	`53`	`# keep referrer data off of HTTP connections`
`54`	`54`	`Referrer-Policy no-referrer-when-downgrade`
`55`	`55`
`56`		`- Content-Security-Policy "default-src 'self'; img-src * 'unsafe-inline'; style-src * 'unsafe-inline'"`
	`56`	`+ Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; img-src * 'unsafe-inline'; style-src * 'unsafe-inline'`
`57`	`57`
`58`	`58`	`X-XSS-Protection "1; mode=block"`
`59`	`59`	`}`