diff --git a/src/lib/csp.ts b/src/lib/csp.ts index 1955469e5..4ef18e010 100644 --- a/src/lib/csp.ts +++ b/src/lib/csp.ts @@ -44,7 +44,7 @@ export function getContentSecurityPolicy(scripts: SpaceIntegrationScript[], nonc script-src 'self' 'nonce-${nonce}' 'strict-dynamic' 'unsafe-inline' 'unsafe-eval' ${assetsDomain} https://integrations.gitbook.com https://cdn.iframe.ly; style-src 'self' ${assetsDomain} fonts.googleapis.com 'unsafe-inline'; img-src * 'self' blob: data: files.gitbook.com ${assetsDomain}; - connect-src * 'self' integrations.gitbook.com app.gitbook.com ${assetsDomain}; + connect-src * 'self' integrations.gitbook.com app.gitbook.com api.gitbook.com ${assetsDomain}; font-src 'self' fonts.gstatic.com ${assetsDomain}; frame-src *; object-src 'none';