fix: security content policy

citrusframework · Nov 3, 2023 · d3354bc · d3354bc
1 parent b23a054
commit d3354bc
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 3 deletions.
diff --git a/...main/java/org/citrusframework/simulator/ui/config/SimulatorUiConfigurationProperties.java b/...main/java/org/citrusframework/simulator/ui/config/SimulatorUiConfigurationProperties.java
@@ -27,8 +27,7 @@ public void setSecurity(Security security) {
 
     public static class Security {
 
-        private static final String DEFAULT_CONTENT_SECURITY_POLICY = "default-src 'self'; frame-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self' data:";
-
+        private static final String DEFAULT_CONTENT_SECURITY_POLICY = "default-src 'self'; frame-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' https://fonts.googleapis.com 'unsafe-inline'; img-src 'self' data:; font-src 'self' https://fonts.gstatic.com data:";
         private String contentSecurityPolicy = DEFAULT_CONTENT_SECURITY_POLICY;
 
         public String getContentSecurityPolicy() {

diff --git a/simulator-ui/src/main/webapp/content/css/loading.css b/simulator-ui/src/main/webapp/content/css/loading.css
@@ -133,7 +133,7 @@
   left: -8px;
   width: 24px;
   height: 10px;
-  background-image: url('../images/citrus-simulator-transparent.png');
+  background-image: url('../../content/images/citrus-simulator-transparent.png');
   background-size: contain;
   -webkit-animation: lds-pacman-3 1s linear infinite;
   animation: lds-pacman-3 1.5s linear infinite;