fix(csp): allow unsafe-eval for HEIC image conversion

2026-05-13 10:34:57 +02:00 · 2026-05-13 10:34:57 +02:00 · 93b51a0bf5
commit 93b51a0bf5
parent 5b710a429a
1 changed files with 1 additions and 1 deletions
--- a/server/src/app.ts
+++ b/server/src/app.ts
@ -122,7 +122,7 @@ export function createApp(): express.Application {
    contentSecurityPolicy: {
      directives: {
        defaultSrc: ["'self'"],
-        scriptSrc: ["'self'", "'wasm-unsafe-eval'"],
+        scriptSrc: ["'self'", "'wasm-unsafe-eval'", "'unsafe-eval'"],
        styleSrc: ["'self'", "'unsafe-inline'", "https://fonts.googleapis.com", "https://unpkg.com"],
        imgSrc: ["'self'", "data:", "blob:", "https:"],
        connectSrc: [