ba-cafe

commit a39c09b364b9a65d36b21bd615ba33d283aa6beb
parent 3e2e6a7e49041ebb9e476a8c16a5de21bc5d19d0
Author: Sunny <kajimalu10@gmail.com>
Date:   Mon, 20 Jul 2026 18:28:31 +0900

fix: add worker-src directive to CSP header for OneSignal support

Diffstat:
M
next.config.ts
 | 
1
+

1 file changed, 1 insertion(+), 0 deletions(-)
diff --git a/next.config.ts b/next.config.ts
@@ -4,6 +4,7 @@ import withPWAInit from "@ducanh2912/next-pwa";
 const cspHeader = `
     default-src 'self';
     script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.onesignal.com https://onesignal.com https://static.cloudflareinsights.com https://www.googletagmanager.com;
+    worker-src 'self' blob: https://*.onesignal.com https://onesignal.com;
     style-src 'self' 'unsafe-inline';
     img-src 'self' blob: data: https://lh3.googleusercontent.com https://cdn.discordapp.com https://*.onesignal.com https://www.google-analytics.com https://www.googletagmanager.com;
     font-src 'self';