fix img-src CSP directive

fix CSP directive . .
juanpprieto · Nov 14, 2023 · c707402 · c707402
1 parent d7e3537
commit c707402
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/app/entry.server.tsx b/app/entry.server.tsx
@@ -13,11 +13,13 @@ export default async function handleRequest(
   // 1. Add the Rick & Morty CDN to the list of allowed image sources
   const {nonce, header, NonceProvider} = createContentSecurityPolicy({
     imgSrc: [
+      "'self'",
       'http://localhost:3000',
+      'https://*.o2.myshopify.dev',
       'data:',
       'https://cdn.shopify.com',
       'https://shopify.com',
-      'https://rickandmortyapi.com/api',
+      'https://rickandmortyapi.com/api/character',
     ],
   });