From 53f664ed93798d8dff0d52776dcae8d6801dd07c Mon Sep 17 00:00:00 2001
From: Georges-Antoine Assi <contact@me.gantoine.com>
Date: Sat, 19 Jul 2025 23:24:20 -0400
Subject: [PATCH] tweak csp rules

---
 overrides/main.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/overrides/main.html b/overrides/main.html
index d39a301..1f5f8cf 100644
--- a/overrides/main.html
+++ b/overrides/main.html
@@ -1,6 +1,6 @@
 {% extends "base.html" %} {% block extrahead %}
 <meta
     http-equiv="Content-Security-Policy"
-    content="default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' data: github.com raw.githubusercontent.com *.s3.amazonaws.com img.youtube.com invidget.switchblade.xyz; font-src 'self' data: fonts.gstatic.com; connect-src 'self' api.github.com;"
+    content="default-src 'self'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' data: github.com raw.githubusercontent.com *.s3.amazonaws.com img.youtube.com invidget.switchblade.xyz cdn.jsdelivr.net; font-src 'self' data: fonts.gstatic.com; connect-src 'self' api.github.com;frame-ancestors 'none'; form-action 'self'; upgrade-insecure-requests;"
 />
 {% endblock %}