fix(site): Fix CSP directives for monaco (#6709)

BrunoQuaresma · web-flow · commit 5cbe36017654 · 2023-03-21T12:51:02.000-07:00
diff --git a/site/site.go b/site/site.go
@@ -326,7 +326,8 @@ func cspHeaders(next http.Handler) http.Handler {
 			CSPDirectiveScriptSrc: {"'self' https://cdn.jsdelivr.net"},
 			CSPDirectiveStyleSrc:  {"'self' 'unsafe-inline' https://cdn.jsdelivr.net"},
 			// data: is used by monaco editor on FE for Syntax Highlight
-			CSPDirectiveFontSrc: {"'self' data:"},
+			CSPDirectiveFontSrc:   {"'self' https://cdn.jsdelivr.net data:"},
+			CSPDirectiveWorkerSrc: {"'self' blob:"},
 			// object-src is needed to support code-server
 			CSPDirectiveObjectSrc: {"'self'"},
 			// blob: for loading the pwa manifest for code-server
