FredkF
Denoβ€’2mo agoβ€’
1 reply
Fredk

Cannot override the CSP defaults despite what the doc says

When I add "img-src 'self' data: 'https://firebasestorage.googleapis.com'", to my csp[] list, I get:
Ignoring duplicate Content-Security-Policy directive 'img-src'
How do i override the default img-src 'self' data: that I see in the header?
Source: https://fresh.deno.dev/docs/plugins/csp
image.png
Set Content-Security-Policy (CSP) HTTP headers with the csp middleware
csp | Fresh docs
Was this page helpful?