From 14b6ae2337c260d92c47b38e38f18d10efe80b6e Mon Sep 17 00:00:00 2001
From: lockbitchat <lockbitchat@tutanota.com>
Date: Mon, 8 Sep 2025 16:10:26 -0400
Subject: [PATCH] Add to CSP

report-uri /csp-report;
report-to csp-endpoint;">
---
 index.html | 15 +++++++++++----
 1 file changed, 11 insertions(+), 4 deletions(-)

diff --git a/index.html b/index.html
index a9ec711..1f18b31 100644
--- a/index.html
+++ b/index.html
@@ -9,10 +9,17 @@
            style-src 'self';
            font-src 'self' ;
            connect-src 'self' https: ;
-           img-src 'self' data:;
-           media-src 'none';
-           object-src 'none';
-           frame-src 'none';">
+           img-src 'self' data:; 
+           font-src 'self'; 
+           manifest-src 'self'; 
+           worker-src 'self'; 
+           object-src 'none'; 
+           frame-ancestors 'none'; 
+           form-action 'self'; 
+           upgrade-insecure-requests; 
+           block-all-mixed-content; 
+           report-uri /csp-report; 
+           report-to csp-endpoint;">
     <meta http-equiv="X-Content-Type-Options" content="nosniff">
     <meta http-equiv="X-XSS-Protection" content="1; mode=block">
     <meta http-equiv="Referrer-Policy" content="strict-origin-when-cross-origin">