From 621a983061ff7c9dcdaa0537862dcbd011d5f471 Mon Sep 17 00:00:00 2001 From: Shimul Date: Sat, 20 Mar 2021 19:52:16 +0530 Subject: [PATCH] Fix manifest.json not loading Refused to load manifest from 'https://xxxxx.xxx/static/img/favicon/manifest.json' because it violates the following Content Security Policy directive: "default-src 'none'". Note that 'manifest-src' was not explicitly set, so 'default-src' is used as a fallback. --- app/__init__.py | 1 + 1 file changed, 1 insertion(+) diff --git a/app/__init__.py b/app/__init__.py index bff20fc..8fc1c21 100644 --- a/app/__init__.py +++ b/app/__init__.py @@ -41,6 +41,7 @@ app.config['BANG_FILE'] = os.path.join( app.config['BANG_PATH'], 'bangs.json') app.config['CSP'] = 'default-src \'none\';' \ + 'manifest-src \'self\';' \ 'img-src \'self\';' \ 'style-src \'self\' \'unsafe-inline\';' \ 'script-src \'self\';' \