about summary refs log tree commit diff
diff options
context:
space:
mode:
-rw-r--r--src/lib.rs1
1 files changed, 1 insertions, 0 deletions
diff --git a/src/lib.rs b/src/lib.rs
index a52db4c..b12bdfc 100644
--- a/src/lib.rs
+++ b/src/lib.rs
@@ -380,6 +380,7 @@ where
                 "form-action 'self';", // Only allow sending forms back to us.
                 "media-src 'self';",   // Only allow embedding media from us.
                 "script-src 'self';",  // Only run scripts we serve.
+                "font-src 'self';",    // Only use fonts we serve.
                 "style-src 'self';",   // Only use styles we serve.
                 "base-uri 'none';",    // Do not allow to change the base URI.
                 "object-src 'none';",  // Do not allow to embed objects (Flash/ActiveX).