Optimized CSP for OnlyOffice

2025-11-23 13:35:04 +00:00 · 2025-11-21 21:50:12 +01:00
parent 28caa495e7
commit cc1ed2b125
1 changed files with 6 additions and 0 deletions
--- a/roles/web-svc-onlyoffice/config/main.yml
+++ b/roles/web-svc-onlyoffice/config/main.yml
@@ -7,6 +7,12 @@ server:
    whitelist:
      frame-ancestors:
        - "{{ WEB_PROTOCOL }}://*.{{ PRIMARY_DOMAIN }}"
+      script-src-elem:
+        - "https://fonts.googleapis.com"
+      style-src-elem:
+        - "https://fonts.googleapis.com"
+      font-src:
+        - "https://fonts.gstatic.com"
    flags:
      script-src-attr:
        unsafe-inline:  true