From 54ae7813529008822e4938724ecab83679db3d95 Mon Sep 17 00:00:00 2001
From: welpo <welpo@users.noreply.github.com>
Date: Thu, 23 Feb 2023 01:35:06 +0100
Subject: [PATCH] =?UTF-8?q?=F0=9F=94=92=EF=B8=8F=20fix:=20prevent=20malfor?=
 =?UTF-8?q?med=20CSP=20header?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 templates/partials/header.html | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/templates/partials/header.html b/templates/partials/header.html
index 6753abe..37a61e0 100644
--- a/templates/partials/header.html
+++ b/templates/partials/header.html
@@ -45,10 +45,14 @@
 
     <meta http-equiv="Content-Security-Policy"
     content="default-src 'self'
-    {% if config.extra.allowed_domains %}
+    {%- if config.extra.allowed_domains -%}
+    ; 
         {%- for domain in config.extra.allowed_domains -%}
-            {{ domain.directive }} {{ domain.domains | join(sep=' ') }};
+            {{ domain.directive }} {{ domain.domains | join(sep=' ') }}
+            {%- if not loop.last -%}
+            ;
+            {%- endif -%}
         {%- endfor -%}
-    {% endif %}">
+    {%- endif -%}">
 
 </head>