From e3c845d8f563d75618e237cdf16bd4ad4a00dcb8 Mon Sep 17 00:00:00 2001
From: Vika <vika@fireburn.ru>
Date: Wed, 16 Apr 2025 03:37:13 +0300
Subject: Add `connect-src 'self';` to CSP

why is this a thing... should've just put `default-src 'self'` to get
behavior similar to what was in the past

Change-Id: I0d3850931fe97f87a1aa10223502791a78cbe7fc
---
 src/indieauth/mod.rs | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

(limited to 'src/indieauth/mod.rs')

diff --git a/src/indieauth/mod.rs b/src/indieauth/mod.rs
index 2e8a44b..5cdbf05 100644
--- a/src/indieauth/mod.rs
+++ b/src/indieauth/mod.rs
@@ -218,7 +218,9 @@ async fn authorization_endpoint_get<A: AuthBackend, D: Storage + 'static>(
                             )
                                 .into_response();
                         }
-
+                        // Should we attempt to create synthetic metadata from an h-card?
+                        //
+                        // This would increase compatibility with personal websites.
                         if let Some(app) = mf2
                             .items
                             .iter()
-- 
cgit 1.4.1