fix: CSP add cdn.jsdelivr.net, fix regex syntax, fix manifest PNG->SVG

2026-06-04 23:50:10 -04:00
parent 00f32ce9c2
commit 69e86c239b
5 changed files with 27 additions and 42 deletions
@@ -544,7 +544,7 @@ class SecurityHeadersMiddleware(BaseHTTPMiddleware):
        response.headers["Referrer-Policy"] = "strict-origin-when-cross-origin"
        response.headers["Content-Security-Policy"] = (
            "default-src 'self'; "
-            "script-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://unpkg.com https://esm.sh; "
+            "script-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://unpkg.com https://esm.sh https://cdn.jsdelivr.net; "
            "style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com; "
            "img-src 'self' data: blob:; "
            "connect-src 'self' https://esm.sh https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://fonts.gstatic.com; "