From fdfc89e5778e41dd9c9185a6003e12068c40ebb2 Mon Sep 17 00:00:00 2001
From: Lovell Fuller <github@lovell.info>
Date: Tue, 16 Jun 2020 18:41:18 +0100
Subject: [PATCH] Docs: add content security policy

---
 docs/index.html | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/docs/index.html b/docs/index.html
index b46864c6..cd72277d 100644
--- a/docs/index.html
+++ b/docs/index.html
@@ -5,6 +5,12 @@
   <meta charset="utf-8">
   <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
   <meta name="description" content="Resize large images in common formats to smaller, web-friendly JPEG, PNG and WebP images of varying dimensions">
+  <meta http-equiv="Content-Security-Policy" content="default-src 'self'; object-src 'none'; style-src 'unsafe-inline';
+    img-src 'unsafe-inline' data: https://pixel.plumbing/px/ https://cdn.jsdelivr.net/gh/lovell/ https://www.google-analytics.com;
+    connect-src 'self' https://cdn.jsdelivr.net/gh/lovell/ https://www.google-analytics.com;
+    script-src 'sha256-iXDHv+t2aGdJcmEvwHfqmGH4SrOSx+P8rCF6+WLLwXA=' 'unsafe-eval'
+      https://cdn.jsdelivr.net/npm/docute@4/dist/docute.min.js
+      https://www.google-analytics.com/analytics.js;">
   <link rel="icon" type="image/png" href="https://pixel.plumbing/px/32x32/sharp-logo.svg">
   <link rel="apple-touch-icon-precomposed" sizes="152x152" href="https://pixel.plumbing/px/152x152/sharp-logo.svg">
   <link rel="apple-touch-icon-precomposed" sizes="144x144" href="https://pixel.plumbing/px/144x144/sharp-logo.svg">