fix: close California play and asset acceptance gaps
This commit is contained in:
@@ -73,6 +73,11 @@ face and every office screen placeholder intact. The CSP needs no camera/media
|
||||
host exception: webcam and display tracks are caller-owned `MediaStream`s, not
|
||||
network media URLs, and signaling remains under same-origin `connect-src`.
|
||||
|
||||
The production policy may contain deployment-specific sources, but every one is
|
||||
an operator-owned exception to this repository minimum. Audit and remove stale
|
||||
font/CDN/identity origins; do not cargo-cult a broader live header back into this
|
||||
template. A same-origin Tera build needs no Google Fonts or jsDelivr source.
|
||||
|
||||
## Serving the API too
|
||||
|
||||
Only needed for live weather, real ADS-B, or markers from an external source.
|
||||
|
||||
Reference in New Issue
Block a user