fix: switch back to csp-report-only

This commit is contained in:
Amruth Pillai
2026-04-29 21:40:57 +02:00
parent 4cf5cdd181
commit 480e9a2612
+2 -2
View File
@@ -32,7 +32,7 @@ export default createServerEntry({
// Policy for PDF printer routes
if (request.url.includes("/printer/")) {
headers.set(
"Content-Security-Policy",
"Content-Security-Policy-Report-Only",
`default-src 'self'; img-src 'self' data:; font-src ${fontSrc}; style-src ${styleSrc}; connect-src 'self'; script-src ${scriptSrc}; worker-src 'self' blob:; frame-ancestors 'none'; base-uri 'self';`,
);
}
@@ -42,7 +42,7 @@ export default createServerEntry({
setIfAbsent(headers, "Cross-Origin-Resource-Policy", "same-site");
setIfAbsent(
headers,
"Content-Security-Policy",
"Content-Security-Policy-Report-Only",
`default-src 'self'; script-src ${scriptSrc}; worker-src 'self' blob:; style-src ${styleSrc}; img-src 'self' data: blob: https:; font-src ${fontSrc} data:; connect-src 'self' https: wss:; frame-ancestors 'none'; base-uri 'self'; form-action 'self';`,
);
}