From 2b5b893f6ed0bce1b79f20ccd4e125844f765085 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?S=C3=A9bastien=20Gaya?= <sebastien.gaya@gmail.com>
Date: Mon, 24 Jul 2023 11:24:15 +0200
Subject: [PATCH] csp http meta

---
 layouts/_default/baseof.html   | 1 +
 layouts/partials/head/csp.html | 3 +++
 2 files changed, 4 insertions(+)
 create mode 100644 layouts/partials/head/csp.html

diff --git a/layouts/_default/baseof.html b/layouts/_default/baseof.html
index 36cc5617..d47975a1 100644
--- a/layouts/_default/baseof.html
+++ b/layouts/_default/baseof.html
@@ -3,6 +3,7 @@
   <head>
     <meta charset="utf-8">
     <meta name="viewport" content="width=device-width, initial-scale=1">
+    {{ partial "head/csp.html" . }}
     {{ partial "head/css.html" }}
     {{ partial "head/seo.html" . }}
     {{ partial "head/favicons.html" . }}
diff --git a/layouts/partials/head/csp.html b/layouts/partials/head/csp.html
new file mode 100644
index 00000000..2fc5f806
--- /dev/null
+++ b/layouts/partials/head/csp.html
@@ -0,0 +1,3 @@
+<meta
+  http-equiv="Content-Security-Policy"
+  content="default-src 'self' https://* {{ if not hugo.IsProduction }}'unsafe-inline'{{ end }}" />
\ No newline at end of file
-- 
GitLab