diff --git a/router_dyndns/ddns.py b/router_dyndns/ddns.py
index cc5d396..669533c 100644
--- a/router_dyndns/ddns.py
+++ b/router_dyndns/ddns.py
@@ -155,7 +155,7 @@ def make_app(settings: DdnsSettings | None = None) -> FastAPI:
response.headers["Referrer-Policy"] = "same-origin"
response.headers["Permissions-Policy"] = "geolocation=(), microphone=(), camera=()"
response.headers["Content-Security-Policy"] = (
- "default-src 'self'; script-src 'unsafe-inline' 'self'; style-src 'unsafe-inline' 'self'; form-action 'self'; frame-ancestors 'none'"
+ "default-src 'self'; script-src 'unsafe-inline' 'self'; style-src 'unsafe-inline' 'self' https://cdn.jsdelivr.net; form-action 'self'; frame-ancestors 'none'"
)
if settings.public_base_url.startswith("https://"):
response.headers["Strict-Transport-Security"] = "max-age=31536000; includeSubDomains"
@@ -249,7 +249,7 @@ def make_app(settings: DdnsSettings | None = None) -> FastAPI:
Deleted
Hostname deleted.
The update URL no longer works.
- Home
+ Home
@@ -540,8 +540,8 @@ def _render_public_home(
DynDNS without signups.
Create a secure update endpoint under {suffix}. Provider hostnames are anonymous; custom domains require DNS proof.
@@ -556,10 +556,10 @@ def _render_public_home(
@@ -586,7 +586,7 @@ def _top_nav(label: str | None = None, links: str = "") -> str:
Skip to content