fix Content-Security-Policy header

cherry-picked from ac7d86f Co-Authored-By: Jannis R <[email protected]>
derhuerst · Feb 17, 2025 · ff42b7b · ff42b7b
1 parent bbff297
commit ff42b7b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/api.js b/api.js
@@ -133,7 +133,7 @@ const config = {
 	logging: true,
 	aboutPage: false,
 	etags: 'strong',
-	csp: `default-src 'none' style-src 'self' 'unsafe-inline' img-src https:`,
+	csp: `default-src 'none'; style-src 'self' 'unsafe-inline'; img-src https:`,
 	healthCheck,
 	mapRouteParsers,
 	modifyRoutes,