diff --git a/nginx.conf b/nginx.conf index b66ad79..ce3be0b 100644 --- a/nginx.conf +++ b/nginx.conf @@ -10,7 +10,7 @@ server { add_header Permissions-Policy "microphone=(self \"https://stagingchatbot.pmkisan.gov.in\")" always; # Content Security Policy for app assets and trusted external font sources - add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; media-src 'self' data: blob: https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self';" always; + add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; media-src 'self' data: blob: https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' https://www.amulpashudhan.com http://www.amulpashudhan.com https://ahsupportqaauth.orbitron.in;" always; } # redirect server error pages to the static page /50x.html