From a83994af4312aa348c52db71d80a5aee22574f64 Mon Sep 17 00:00:00 2001 From: Developer 02 Date: Mon, 16 Sep 2024 15:19:56 +0200 Subject: [PATCH] =?UTF-8?q?feat:=20Google=20Fonts=20und=20Google=20Icons?= =?UTF-8?q?=20hinzugef=C3=BCgt;=20CSP-Anpassungen=20vorgenommen?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Google Fonts und Google Icons in das Projekt integriert. - Content Security Policy (CSP) aktualisiert, um die Nutzung von Google Fonts und Google Icons zu ermöglichen. --- EnvelopeGenerator.Web/Views/Home/ShowEnvelope.cshtml | 5 ++++- EnvelopeGenerator.Web/Views/Shared/_Layout.cshtml | 7 +++++++ EnvelopeGenerator.Web/appsettings.json | 4 ++-- 3 files changed, 13 insertions(+), 3 deletions(-) diff --git a/EnvelopeGenerator.Web/Views/Home/ShowEnvelope.cshtml b/EnvelopeGenerator.Web/Views/Home/ShowEnvelope.cshtml index d1d9ad58..9695489d 100644 --- a/EnvelopeGenerator.Web/Views/Home/ShowEnvelope.cshtml +++ b/EnvelopeGenerator.Web/Views/Home/ShowEnvelope.cshtml @@ -25,7 +25,10 @@ -
@($"{_localizer[WebKey.Hello]} {Model.Name}, {@envelope?.Message}".TrySanitize(_sanitizer))
+ + info + + @($"{_localizer[WebKey.Hello]} {Model.Name}, {@envelope?.Message}".TrySanitize(_sanitizer))
...
diff --git a/EnvelopeGenerator.Web/Views/Shared/_Layout.cshtml b/EnvelopeGenerator.Web/Views/Shared/_Layout.cshtml index a858721c..8525137e 100644 --- a/EnvelopeGenerator.Web/Views/Shared/_Layout.cshtml +++ b/EnvelopeGenerator.Web/Views/Shared/_Layout.cshtml @@ -17,8 +17,15 @@ + + + @if (ViewData["EnvelopeKey"] is string envelopeKey) { diff --git a/EnvelopeGenerator.Web/appsettings.json b/EnvelopeGenerator.Web/appsettings.json index 8d28c37e..5f4d5bf0 100644 --- a/EnvelopeGenerator.Web/appsettings.json +++ b/EnvelopeGenerator.Web/appsettings.json @@ -20,9 +20,9 @@ "Content-Security-Policy": [ // The first format parameter {0} will be replaced by the nonce value. "default-src 'self'", "script-src 'self' 'nonce-{0}' 'unsafe-eval'", - "style-src 'self' 'unsafe-inline'", + "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com:*", "img-src 'self' data: https: blob:", - "font-src 'self'", + "font-src 'self' https://fonts.gstatic.com:*", "connect-src 'self' https://nominatim.openstreetmap.org:* http://localhost:* https://localhost:* ws://localhost:* wss://localhost:* blob:", "frame-src 'self'", "media-src 'self'",