🔒️ fix(CSP): improve CSP coverage (#471)

3 months ago · e519864543
parent 6445f549ad
commit e519864543
1 changed files with 5 additions and 4 deletions
--- a/templates/partials/header.html
+++ b/templates/partials/header.html
@ -1,5 +1,10 @@
 <head>
    <meta charset="UTF-8">
+
+    {%- if macros_settings::evaluate_setting_priority(setting="enable_csp", page=page | default(value=""), section=section | default(value=""), default_global_value="true") == "true" -%}
+        {%- include "partials/content_security_policy.html" -%}
+    {%- endif -%}
+
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <meta name="base" content="{{ config.base_url | safe }}">

@ -130,10 +135,6 @@

    <meta property="og:site_name" content="{{ config.title }}">

-    {%- if macros_settings::evaluate_setting_priority(setting="enable_csp", page=page | default(value=""), section=section | default(value=""), default_global_value="true") == "true" -%}
-        {%- include "partials/content_security_policy.html" -%}
-    {%- endif -%}
-
    {%- if config.extra.theme_switcher and config.extra.theme_switcher == true -%}
        {# If JavaScript is disabled, hide the button. #}
        <noscript><link rel="stylesheet" href="{{ get_url(path='no_js.css') | safe }}"/></noscript>