🐛 Fix: CSP index.html에 적용

prgrms-web-devcourse-final-project · Nov 17, 2024 · fa1f631 · fa1f631
1 parent 6a2b8a7
commit fa1f631
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 14 deletions.
diff --git a/index.html b/index.html
@@ -3,6 +3,21 @@
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <meta
+      http-equiv="Content-Security-Policy"
+      content="
+        default-src 'self';
+        script-src 'self' 'unsafe-inline' 'unsafe-eval';
+        style-src 'self' 'unsafe-inline';
+        img-src 'self' data: https:;
+        font-src 'self' data:;
+        connect-src 'self' https:;
+        base-uri 'self';
+        form-action 'self';
+        object-src 'none';
+        frame-ancestors 'none';
+      "
+    />
     <title>DDang | 반려견 산책 서비스</title>
     <link rel="icon" href="/favicon.ico" />
     <link rel="apple-touch-icon" href="/apple-touch-icon-180x180.png" sizes="180x180" />

diff --git a/src/App.tsx b/src/App.tsx
@@ -18,20 +18,6 @@ function App() {
         <ThemeProvider theme={theme}>
           <Helmet>
             <title>DDang</title>
-            <meta
-              httpEquiv='Content-Security-Policy'
-              content={`
-                default-src 'self';
-                script-src 'self' 'unsafe-inline' 'unsafe-eval';
-                style-src 'self' 'unsafe-inline';
-                img-src 'self' data: https:;
-                font-src 'self' data:;
-                connect-src 'self' https:;
-                frame-src 'self';
-                base-uri 'self';
-                form-action 'self';
-              `}
-            />
           </Helmet>
           <button onClick={toggleTheme} hidden>
             Toggle Theme