feat: Introduce core backend application with authentication API and a new popout HTML page.

2026-03-24 09:51:38 -04:00
parent 5e300f9ada
commit 46e054f5dd
3 changed files with 30 additions and 4 deletions
@@ -381,10 +381,10 @@ class SecurityHeadersMiddleware(BaseHTTPMiddleware):
        response.headers["Content-Security-Policy"] = (
            "default-src 'self'; "
            "script-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://unpkg.com https://esm.sh; "
-            "style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com; "
+            "style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com; "
            "img-src 'self' data: blob:; "
-            "connect-src 'self'; "
-            "font-src 'self';"
+            "connect-src 'self' https://esm.sh https://unpkg.com; "
+            "font-src 'self' https://fonts.gstatic.com;"
        )
        return response