This is an automated email from the ASF dual-hosted git repository.
duansg pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/hertzbeat.git
The following commit(s) were added to refs/heads/master by this push:
new afd89e4309 Fix htaccess (#3980)
afd89e4309 is described below
commit afd89e430972a32ec50f202d34573b17139f4c41
Author: Logic <[email protected]>
AuthorDate: Fri Jan 16 22:16:15 2026 +0800
Fix htaccess (#3980)
Signed-off-by: Logic <[email protected]>
---
home/static/.htaccess | 10 +++++++++-
1 file changed, 9 insertions(+), 1 deletion(-)
diff --git a/home/static/.htaccess b/home/static/.htaccess
index 56a3dea82b..b767ea111c 100644
--- a/home/static/.htaccess
+++ b/home/static/.htaccess
@@ -1,3 +1,11 @@
<IfModule mod_headers.c>
- Header set Content-Security-Policy "default-src data: blob: 'self'
*.apache.org *.kapa.ai *.githubusercontent.com *.googleapis.com *.google.com
*.run.app *.gstatic.com *.github.com https://hcaptcha.com
https://*.hcaptcha.com *.algolia.net *.algolianet.com *.apachecon.com
*.communityovercode.org 'unsafe-inline' 'unsafe-eval'; frame-src *;
frame-ancestors 'self' *.google.com; worker-src 'self' data: blob:; img-src
'self' blob: data: https:; font-src 'self' data: blob:; object-src 'none'"
+ Header set Content-Security-Policy "default-src 'self' data: blob:
*.apache.org *.kapa.ai *.githubusercontent.com *.googleapis.com *.google.com
*.run.app *.gstatic.com *.github.com https://hcaptcha.com
https://*.hcaptcha.com *.algolia.net *.algolianet.com *.apachecon.com
*.communityovercode.org 'unsafe-inline' 'unsafe-eval'; \
+script-src 'self' 'unsafe-inline' 'unsafe-eval' widget.kapa.ai www.google.com
https://hcaptcha.com https://*.hcaptcha.com https://www.gstatic.com; \
+connect-src 'self' proxy.kapa.ai kapa-widget-proxy-la7dkmplpq-uc.a.run.app
metrics.kapa.ai *.algolia.net *.algolianet.com https://hcaptcha.com
https://*.hcaptcha.com www.google.com; \
+frame-src 'self' * www.google.com https://hcaptcha.com https://*.hcaptcha.com;
\
+frame-ancestors 'self' *.google.com; \
+worker-src 'self' data: blob:; \
+img-src 'self' blob: data: https:; \
+font-src 'self' data: blob:; \
+object-src 'none'"
</IfModule>
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
