diff --git a/router_dyndns/ddns.py b/router_dyndns/ddns.py index cc5d396..669533c 100644 --- a/router_dyndns/ddns.py +++ b/router_dyndns/ddns.py @@ -155,7 +155,7 @@ def make_app(settings: DdnsSettings | None = None) -> FastAPI: response.headers["Referrer-Policy"] = "same-origin" response.headers["Permissions-Policy"] = "geolocation=(), microphone=(), camera=()" response.headers["Content-Security-Policy"] = ( - "default-src 'self'; script-src 'unsafe-inline' 'self'; style-src 'unsafe-inline' 'self'; form-action 'self'; frame-ancestors 'none'" + "default-src 'self'; script-src 'unsafe-inline' 'self'; style-src 'unsafe-inline' 'self' https://cdn.jsdelivr.net; form-action 'self'; frame-ancestors 'none'" ) if settings.public_base_url.startswith("https://"): response.headers["Strict-Transport-Security"] = "max-age=31536000; includeSubDomains" @@ -249,7 +249,7 @@ def make_app(settings: DdnsSettings | None = None) -> FastAPI:

Deleted

Hostname deleted.

The update URL no longer works.

- Home + Home @@ -540,8 +540,8 @@ def _render_public_home(

DynDNS without signups.

Create a secure update endpoint under {suffix}. Provider hostnames are anonymous; custom domains require DNS proof.

- Get a hostname - Verify a domain + Get a hostname + Verify a domain
@@ -556,10 +556,10 @@ def _render_public_home(
- +
@@ -586,7 +586,7 @@ def _top_nav(label: str | None = None, links: str = "") -> str: