fix: relax csp

2026-02-15 05:40:05 +01:00 · 2025-11-06 05:07:53 +00:00
1 changed files with 1 additions and 1 deletions
--- a/internal/api/mw_security.go
+++ b/internal/api/mw_security.go
@@ -49,7 +49,7 @@ func SecurityHeaders(next http.Handler) http.Handler {
 				"default-src 'self'",
 				"base-uri 'self'",
 				"form-action 'self'",
-				"script-src 'self'",
+				"script-src 'self' 'unsafe-inline'",
 				"style-src 'self' 'unsafe-inline' https://fonts.googleapis.com",
 				"img-src 'self' data: blob:",
 				"font-src 'self' data: https://fonts.gstatic.com",