diff --git a/pkg/middleware/security.go b/pkg/middleware/security.go index 9334c77..bbfd3e5 100644 --- a/pkg/middleware/security.go +++ b/pkg/middleware/security.go @@ -14,7 +14,7 @@ func SecurityHeaders(c *fiber.Ctx) error { c.Set("Referrer-Policy", "strict-origin-when-cross-origin") if strings.HasPrefix(c.Path(), "/swagger") { - c.Set("Content-Security-Policy", "default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data:; script-src 'self' 'unsafe-inline'; frame-ancestors 'none'") + c.Set("Content-Security-Policy", "default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https://validator.swagger.io; script-src 'self' 'unsafe-inline'; frame-ancestors 'none'") } else { c.Set("Content-Security-Policy", "default-src 'none'; frame-ancestors 'none'") }