fix(security): update Content-Security-Policy hash in netlify.toml and vercel.json

danieIabel · danieIabel · commit 6b60f62dbf80 · 2025-06-03T15:50:42.000-05:00
diff --git a/demo/netlify.toml b/demo/netlify.toml
@@ -9,7 +9,7 @@
   for = "/*"
   [headers.values]
     Referrer-Policy = "strict-origin-when-cross-origin"
-    Content-Security-Policy = "default-src 'self' https://cdn.jsdelivr.net https://fonts.bunny.net; frame-ancestors 'self'; form-action 'self'; script-src 'self' https://cdn.jsdelivr.net 'sha256-mHDS1bwUA7C11WI2Lg/0s4F/QJC5+BawSdYhX8Icul0=';"
+    Content-Security-Policy = "default-src 'self' https://cdn.jsdelivr.net https://fonts.bunny.net; frame-ancestors 'self'; form-action 'self'; script-src 'self' https://cdn.jsdelivr.net 'sha256-nUftcM31JjgTW8RErFLHr33+RZ1mb2OlIlDldRFfhbk=';"
     X-Content-Type-Options = "nosniff"
     X-Frame-Options = "sameorigin"
     X-XSS-Protection = "1; mode=block"
diff --git a/demo/vercel.json b/demo/vercel.json
@@ -16,7 +16,7 @@
         },
         {
           "key": "Content-Security-Policy",
-          "value": "default-src 'self' https://cdn.jsdelivr.net https://fonts.bunny.net; frame-ancestors 'self'; form-action 'self'; script-src 'self' https://cdn.jsdelivr.net 'sha256-mHDS1bwUA7C11WI2Lg/0s4F/QJC5+BawSdYhX8Icul0=';"
+          "value": "default-src 'self' https://cdn.jsdelivr.net https://fonts.bunny.net; frame-ancestors 'self'; form-action 'self'; script-src 'self' https://cdn.jsdelivr.net 'sha256-nUftcM31JjgTW8RErFLHr33+RZ1mb2OlIlDldRFfhbk=';"
         },
         {
           "key": "X-Content-Type-Options",

Original file line number	Diff line number	Diff line change
`@@ -16,7 +16,7 @@`
`16`	`16`	`},`
`17`	`17`	`{`
`18`	`18`	`"key": "Content-Security-Policy",`
`19`		`- "value": "default-src 'self' https://cdn.jsdelivr.net https://fonts.bunny.net; frame-ancestors 'self'; form-action 'self'; script-src 'self' https://cdn.jsdelivr.net 'sha256-mHDS1bwUA7C11WI2Lg/0s4F/QJC5+BawSdYhX8Icul0=';"`
	`19`	`+ "value": "default-src 'self' https://cdn.jsdelivr.net https://fonts.bunny.net; frame-ancestors 'self'; form-action 'self'; script-src 'self' https://cdn.jsdelivr.net 'sha256-nUftcM31JjgTW8RErFLHr33+RZ1mb2OlIlDldRFfhbk=';"`
`20`	`20`	`},`
`21`	`21`	`{`
`22`	`22`	`"key": "X-Content-Type-Options",`