diff --git a/data/commands.json b/data/commands.json index 1ac4828..991d4a8 100644 --- a/data/commands.json +++ b/data/commands.json @@ -211,7 +211,7 @@ "name": "name", "aliases": [], "group": "hosting", - "summary": "prove you hold a Moshpit name, so an app can use it as your identity" + "summary": "prove you hold a Moshpit name, or serve it from a c0mpute site" }, { "name": "doh", diff --git a/src/server.mjs b/src/server.mjs index 7498fe8..bf734ea 100644 --- a/src/server.mjs +++ b/src/server.mjs @@ -72,7 +72,7 @@ export function createApp({ crawlGate = createCrawlGate() } = {}) { 'Referrer-Policy': 'strict-origin-when-cross-origin', 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains', 'Content-Security-Policy': - `default-src 'self'; script-src 'self' https://crawlproof.com; style-src 'self' 'nonce-${res.locals.nonce}'; img-src 'self' data: https://built.indie.pit.world https://pwamart.com; font-src 'self'; connect-src 'self' https://crawlproof.com; frame-src https://crawlproof.com; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; form-action 'self'`, + `default-src 'self'; script-src 'self' https://crawlproof.com https://cdn.jsdelivr.net; style-src 'self' 'nonce-${res.locals.nonce}'; img-src 'self' data: https://built.indie.pit.world https://pwamart.com; font-src 'self'; connect-src 'self' https://crawlproof.com; frame-src https://crawlproof.com; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; form-action 'self'`, 'Permissions-Policy': 'camera=(), microphone=(), geolocation=(), interest-cohort=()', }); next(); diff --git a/src/site.mjs b/src/site.mjs index 0d9fa0d..95d4ea4 100644 --- a/src/site.mjs +++ b/src/site.mjs @@ -72,6 +72,7 @@ export function head({ title, description, path, extraHead = '' }) { + ${extraHead}