diff --git a/config/_default/server.toml b/config/_default/server.toml index 678004108c..f50b439734 100644 --- a/config/_default/server.toml +++ b/config/_default/server.toml @@ -29,8 +29,10 @@ Permissions-Policy = """ # "form-action" is NOT set, so it allows everything (it doesn't default to default-src). If restricted, It must allow at least www.paypal.com and its redirects Content-Security-Policy = """ default-src 'none'; - font-src 'self'; + font-src 'self' https://fonts.gstatic.com; + frame-ancestors 'self' https://isrg.formstack.com; style-src 'unsafe-inline' 'self'; + style-src-elem 'self' https://fonts.googleapis.com; script-src 'unsafe-eval' 'unsafe-inline' 'self' data: https://www.google-analytics.com https://www.googleadservices.com diff --git a/layouts/partials/footer.html b/layouts/partials/footer.html index 293b407428..e69de29bb2 100644 --- a/layouts/partials/footer.html +++ b/layouts/partials/footer.html @@ -1,83 +0,0 @@ -{{ if and (ne .Section "docs") (ne .Section "documents") (not .Params.no_donate_footer) }} -
-{{ end }} - -{{ if ne .Section "documents" }} - -{{ end }}{{/* if ne .Section "documents" */}} - -{{ $js := resources.Get "js/main.js" | fingerprint "sha512" }} - diff --git a/layouts/partials/head.html b/layouts/partials/head.html index 1e2d802e94..29924765b9 100644 --- a/layouts/partials/head.html +++ b/layouts/partials/head.html @@ -3,28 +3,10 @@