From 480e9a2612de7d3ca2426b6bbe3bbc850b07d032 Mon Sep 17 00:00:00 2001
From: Amruth Pillai <im.amruth@gmail.com>
Date: Wed, 29 Apr 2026 21:40:57 +0200
Subject: [PATCH] fix: switch back to csp-report-only

---
 src/server.ts | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/server.ts b/src/server.ts
index e1891105e..3e18f656f 100644
--- a/src/server.ts
+++ b/src/server.ts
@@ -32,7 +32,7 @@ export default createServerEntry({
     // Policy for PDF printer routes
     if (request.url.includes("/printer/")) {
       headers.set(
-        "Content-Security-Policy",
+        "Content-Security-Policy-Report-Only",
         `default-src 'self'; img-src 'self' data:; font-src ${fontSrc}; style-src ${styleSrc}; connect-src 'self'; script-src ${scriptSrc}; worker-src 'self' blob:; frame-ancestors 'none'; base-uri 'self';`,
       );
     }
@@ -42,7 +42,7 @@ export default createServerEntry({
       setIfAbsent(headers, "Cross-Origin-Resource-Policy", "same-site");
       setIfAbsent(
         headers,
-        "Content-Security-Policy",
+        "Content-Security-Policy-Report-Only",
         `default-src 'self'; script-src ${scriptSrc}; worker-src 'self' blob:; style-src ${styleSrc}; img-src 'self' data: blob: https:; font-src ${fontSrc} data:; connect-src 'self' https: wss:; frame-ancestors 'none'; base-uri 'self'; form-action 'self';`,
       );
     }