You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@hugegraph.apache.org by ji...@apache.org on 2025/02/14 07:56:27 UTC

(incubator-hugegraph-doc) branch fix-csp created (now aa216d1f)

This is an automated email from the ASF dual-hosted git repository.

jin pushed a change to branch fix-csp
in repository https://gitbox.apache.org/repos/asf/incubator-hugegraph-doc.git


      at aa216d1f Update baseof.html

This branch includes the following new commits:

     new aa216d1f Update baseof.html

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.

(incubator-hugegraph-doc) 01/01: Update baseof.html

Posted by ji...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

jin pushed a commit to branch fix-csp
in repository https://gitbox.apache.org/repos/asf/incubator-hugegraph-doc.git

commit aa216d1f018ffa504bc09623a8b6c7f2c8b1439b
Author: imbajin <ji...@apache.org>
AuthorDate: Fri Feb 14 15:56:15 2025 +0800

    Update baseof.html
---
 themes/docsy/layouts/_default/baseof.html | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/themes/docsy/layouts/_default/baseof.html b/themes/docsy/layouts/_default/baseof.html
index c7771b0f..44902029 100644
--- a/themes/docsy/layouts/_default/baseof.html
+++ b/themes/docsy/layouts/_default/baseof.html
@@ -3,9 +3,8 @@
   <head>
       <!-- To handle CSP policy -->
       <meta http-equiv="Content-Security-Policy"
-            content="default-src 'self';
-                    style-src 'self' 'unsafe-inline' https://code.jquery.com https://cdn.jsdelivr.net;
-                    script-src 'self' https://code.jquery.com https://cdn.jsdelivr.net;
+            content="script-src 'self' 'unsafe-inline' 'unsafe-eval' https://code.jquery.com https://cdn.jsdelivr.net https://fonts.googleapis.com/;
+                    style-src 'self' 'unsafe-inline' https://code.jquery.com https://cdn.jsdelivr.net https://fonts.googleapis.com/;
                     font-src 'self' https://cdn.jsdelivr.net;
                     img-src 'self' data:">
     {{ partial "head.html" . }}