diff --git a/scripts/generateLayouts.ts b/scripts/generateLayouts.ts index 54cf8e66e0..89253bcbae 100644 --- a/scripts/generateLayouts.ts +++ b/scripts/generateLayouts.ts @@ -334,6 +334,7 @@ async function generateCsp( } } + hosts.add("http://www.schema.org") // We add schema.org as it must be http, not https if (hosts.has("*")) { throw "* is not allowed as connect-src" } diff --git a/src/UI/SpecialVisualizations.ts b/src/UI/SpecialVisualizations.ts index 6c5afafd7e..c7b28bc2e4 100644 --- a/src/UI/SpecialVisualizations.ts +++ b/src/UI/SpecialVisualizations.ts @@ -1728,7 +1728,7 @@ export default class SpecialVisualizations { doc: "Attempt to load ld+json from the specified URL. This can be in an embedded