From 6d71916fec58c96f1769a92e0ea8f42343497c4e Mon Sep 17 00:00:00 2001
From: Cédric Bonhomme <cedric@cedricbonhomme.org>
Date: Fri, 15 Oct 2021 15:07:38 +0200
Subject: chg: updated default configuration for SQLite.

---
 instance/sqlite.py | 13 +++++++++++++
 1 file changed, 13 insertions(+)

(limited to 'instance')

diff --git a/instance/sqlite.py b/instance/sqlite.py
index 43cdc2af..8c2b613c 100644
--- a/instance/sqlite.py
+++ b/instance/sqlite.py
@@ -19,6 +19,19 @@ SQLALCHEMY_DATABASE_URI = "sqlite:///newspipe.db"
 
 # Security
 CONTENT_SECURITY_POLICY = {
+    'default-src': '\'self\'',
+    'img-src': '* data:',
+    'media-src': [
+        'youtube.com',
+    ],
+    'script-src': [
+        '\'self\'',
+        '\'unsafe-inline\'',
+    ],
+    'style-src': [
+        '\'self\'',
+        '\'unsafe-inline\'',
+    ]
 }
 
 # Crawler
-- 
cgit