From 72d10863b8bfa854bb8d059fff46ee6e7ace35c9 Mon Sep 17 00:00:00 2001 From: Pieter Vander Vennet Date: Sat, 15 Jun 2024 20:11:14 +0200 Subject: [PATCH] Attempt to fix #1988 --- scripts/generateLayouts.ts | 2 ++ 1 file changed, 2 insertions(+) diff --git a/scripts/generateLayouts.ts b/scripts/generateLayouts.ts index f7e2aca015..709ffa0fce 100644 --- a/scripts/generateLayouts.ts +++ b/scripts/generateLayouts.ts @@ -392,6 +392,8 @@ class GenerateLayouts extends Script { } } + hosts.add("http://www.schema.org") // Schema.org is _not_ encrypted and thus needs an exception + if (hosts.has("*")) { throw "* is not allowed as connect-src" }