commit 56f0dfe982ed7b790e64cb69652cb9a45fbf362f parent fc396c56feab10c47ff2927fe06c175f6ac318ae Author: Sunny <122193933+Sunny-JP@users.noreply.github.com> Date: Sat, 31 Jan 2026 15:26:07 +0900 Merge pull request #43 from Sunny-JP/v4-sunny-dev update csp Diffstat:
| M | next.config.ts | | | 4 | ++-- |
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/next.config.ts b/next.config.ts @@ -3,11 +3,11 @@ import withPWAInit from "@ducanh2912/next-pwa"; const cspHeader = ` default-src 'self'; - script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.onesignal.com https://onesignal.com; + script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.onesignal.com https://onesignal.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline'; img-src 'self' blob: data: https://lh3.googleusercontent.com https://cdn.discordapp.com https://*.onesignal.com; font-src 'self'; - connect-src 'self' https://*.supabase.co wss://*.supabase.co https://*.onesignal.com https://onesignal.com; + connect-src 'self' https://*.supabase.co wss://*.supabase.co https://*.onesignal.com https://onesignal.com https://cloudflareinsights.com; object-src 'none'; base-uri 'self'; form-action 'self';