diff --git a/CHANGELOG.md b/CHANGELOG.md index 2f197913a..4637a8112 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -11,6 +11,9 @@ You can also check the ## next release +- Fixes + - Improve CSP header + ## 6.5.2 – 2026-08-04 - Fixes diff --git a/app/middleware.ts b/app/middleware.ts index 6ae9db30c..3327585e3 100644 --- a/app/middleware.ts +++ b/app/middleware.ts @@ -32,7 +32,7 @@ function buildCSP(frameAncestors: string): string { return [ `default-src 'self' 'unsafe-inline'${unsafeEval}${sentryCSP}${vercelDefault}`, - `script-src 'self' 'unsafe-inline'${unsafeEval}${sentryCSP}${vercelScript} https://api.mapbox.com https://api.maptiler.com`, + `script-src 'self'${unsafeEval}${sentryCSP}${vercelScript} https://api.mapbox.com https://api.maptiler.com`, `script-src-elem 'self' 'unsafe-inline' https://*.admin.ch https://visualize.admin.ch https://*.visualize.admin.ch${vercelScriptElem} https://api.mapbox.com`, `style-src 'self' 'unsafe-inline' https://fonts.googleapis.com`, `font-src 'self'`,