fix: relax CSP to allow MapLibre workers, tiles, and external APIs

2026-03-30 20:25:22 +02:00
parent 3953e4ff40
commit b23e85c4ca
1 changed files with 1 additions and 1 deletions
--- a/src/renderer/index.html
+++ b/src/renderer/index.html
@@ -6,7 +6,7 @@
    <!-- https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP -->
    <meta
      http-equiv="Content-Security-Policy"
-      content="default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:"
+      content="default-src 'self'; script-src 'self' blob:; worker-src blob:; style-src 'self' 'unsafe-inline'; img-src * data: blob:; connect-src *"
    />
  </head>