From 6a16eccce5f0671ab28f7cec5893356838758552 Mon Sep 17 00:00:00 2001
From: allanice001 <allanice001@gmail.com>
Date: Thu, 6 Nov 2025 05:07:53 +0000
Subject: [PATCH] fix: relax csp

---
 internal/api/mw_security.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/internal/api/mw_security.go b/internal/api/mw_security.go
index b0a5cab..312d524 100644
--- a/internal/api/mw_security.go
+++ b/internal/api/mw_security.go
@@ -49,7 +49,7 @@ func SecurityHeaders(next http.Handler) http.Handler {
 				"default-src 'self'",
 				"base-uri 'self'",
 				"form-action 'self'",
-				"script-src 'self'",
+				"script-src 'self' 'unsafe-inline'",
 				"style-src 'self' 'unsafe-inline' https://fonts.googleapis.com",
 				"img-src 'self' data: blob:",
 				"font-src 'self' data: https://fonts.gstatic.com",