added Content-Security-Policy meta tag

Signed-off-by: Stephan Richter <s.richter@srsoftware.de>
2025-01-07 23:35:24 +01:00
parent 89e8c1be73
commit 9b778d16df
2 changed files with 4 additions and 1 deletions
--- a/htdocs/index.html
+++ b/htdocs/index.html
@@ -1,6 +1,8 @@
 <!DOCTYPE html>
 <html lang="en">
 <head>
+    <meta http-equiv="Content-Security-Policy"
+          content="default-src 'self' schwarzes-jena.de 'unsafe-inline'; connect-src cal.srsoftware.de; img-src *; font-src fonts.gstatic.com" />
    <meta charset="UTF-8" />
    <title>Schwarzes Jena: alternative Tanzveranstaltungen, Lesungen, Konzerte und düstere Zusammenkünfte</title>
    <script src="sj.js"></script>
@@ -181,4 +183,4 @@
        document.addEventListener("DOMContentLoaded", load);
    </script>
 </body>
-</html>
+</html>
--- a/htdocs/positions.css
+++ b/htdocs/positions.css
@@ -100,6 +100,7 @@ footer{
    position: fixed;
    text-align: center;
    bottom: 0;
+    left: 0;
    width: 100%;
 }