From 8afbd07364788045d4c680e5331c43acc548b3d8 Mon Sep 17 00:00:00 2001 From: Jurie Smit Date: Fri, 24 Jul 2026 03:25:14 +0200 Subject: [PATCH] fix(website): allow Next static inline scripts in CSP --- website/public/staticwebapp.config.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/website/public/staticwebapp.config.json b/website/public/staticwebapp.config.json index ffb46ee..e7774c9 100644 --- a/website/public/staticwebapp.config.json +++ b/website/public/staticwebapp.config.json @@ -18,7 +18,7 @@ } }, "globalHeaders": { - "content-security-policy": "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'", + "content-security-policy": "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'", "strict-transport-security": "max-age=31536000; includeSubDomains; preload", "x-content-type-options": "nosniff", "x-frame-options": "DENY",