This is an automated email from the ASF dual-hosted git repository.
lidongdai pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/seatunnel-website.git
The following commit(s) were added to refs/heads/main by this push:
new 2d6fc5e04d2b [Fix] csp connect src (#423)
2d6fc5e04d2b is described below
commit 2d6fc5e04d2b575f2e5e7fa73796ea790a1d9671
Author: Jast <[email protected]>
AuthorDate: Sat Jan 17 08:22:03 2026 +0800
[Fix] csp connect src (#423)
---
.htaccess | 12 +++++++++++-
1 file changed, 11 insertions(+), 1 deletion(-)
diff --git a/.htaccess b/.htaccess
index cc7220a46004..2549e58a3017 100644
--- a/.htaccess
+++ b/.htaccess
@@ -1,3 +1,13 @@
ErrorDocument 404 /404.html
-Header set Content-Security-Policy "default-src data: blob: 'self'
*.apache.org *.kapa.ai *.githubusercontent.com *.googleapis.com *.google.com
*.run.app *.gstatic.com *.github.com https://hcaptcha.com
https://*.hcaptcha.com *.algolia.net *.algolianet.com *.apachecon.com
*.communityovercode.org 'unsafe-inline' 'unsafe-eval'; frame-src *;
frame-ancestors 'self' *.google.com; worker-src 'self' data: blob:; img-src
'self' blob: data: https:; font-src 'self' data: blob:; object-src 'none'"
+<IfModule mod_headers.c>
+ Header set Content-Security-Policy "default-src 'self' data: blob:
*.apache.org *.kapa.ai *.githubusercontent.com *.googleapis.com *.google.com
*.run.app *.gstatic.com *.github.com https://hcaptcha.com
https://*.hcaptcha.com *.apachecon.com *.communityovercode.org 'unsafe-inline'
'unsafe-eval'; \
+script-src 'self' 'unsafe-inline' 'unsafe-eval' widget.kapa.ai www.google.com
https://hcaptcha.com https://*.hcaptcha.com https://www.gstatic.com; \
+connect-src 'self' proxy.kapa.ai kapa-widget-proxy-la7dkmplpq-uc.a.run.app
metrics.kapa.ai *.algolia.net *.algolianet.com https://hcaptcha.com
https://*.hcaptcha.com www.google.com; \
+frame-src 'self' * www.google.com https://hcaptcha.com https://*.hcaptcha.com;
\
+frame-ancestors 'self' *.google.com; \
+worker-src 'self' data: blob:; \
+img-src 'self' blob: data: https:; \
+font-src 'self' data: blob:; \
+object-src 'none'"
+</IfModule>
\ No newline at end of file
