From b23e85c4ca778b1e22e8f315ac95f976d53cd8d4 Mon Sep 17 00:00:00 2001
From: kerboul <crowbar51kerbal@gmail.com>
Date: Mon, 30 Mar 2026 20:25:22 +0200
Subject: [PATCH] fix: relax CSP to allow MapLibre workers, tiles, and external
 APIs

---
 src/renderer/index.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/renderer/index.html b/src/renderer/index.html
index e198e05..338a5db 100644
--- a/src/renderer/index.html
+++ b/src/renderer/index.html
@@ -6,7 +6,7 @@
     <!-- https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP -->
     <meta
       http-equiv="Content-Security-Policy"
-      content="default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:"
+      content="default-src 'self'; script-src 'self' blob:; worker-src blob:; style-src 'self' 'unsafe-inline'; img-src * data: blob:; connect-src *"
     />
   </head>