From 85924ab3c5fbb27c4f774eab01aa220fd1dae767 Mon Sep 17 00:00:00 2001
From: Kevin Veen-Birkenbach <kevin@veen.world>
Date: Thu, 14 Aug 2025 10:59:19 +0200
Subject: [PATCH] Optimized openproject csp

---
 roles/web-app-openproject/config/main.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/roles/web-app-openproject/config/main.yml b/roles/web-app-openproject/config/main.yml
index c06a3403..d88b0599 100644
--- a/roles/web-app-openproject/config/main.yml
+++ b/roles/web-app-openproject/config/main.yml
@@ -24,7 +24,10 @@ server:
       script-src-elem:
         unsafe-inline: true
       style-src:
-        unsafe-inline: true  
+        unsafe-inline: true
+    whitelist:
+      font-src:
+        - "data:"
   domains:
     canonical:
       - "project.{{ PRIMARY_DOMAIN }}"