Even more testing

2015-06-16 11:54:58 -04:00
parent 121dabdf73
commit efb4bd1781
1 changed files with 4 additions and 1 deletions
--- a/server/server.js
+++ b/server/server.js
@ -142,7 +142,10 @@ app.use(helmet.csp({
  ].concat(trusted),
  'connect-src': [
  ].concat(trusted),
-  styleSrc: trusted,
+  styleSrc: [
+    'http://fonts.googleapis.com/*',
+    'http://fonts.gstatic.com/*'
+  ].concat(trusted),
  imgSrc: [
    /* allow all input since we have user submitted images for public profile*/
    '*'