fix(site) : keep public pages up during auth outages and allow ad script

2026-10-06 15:32:48 +07:00
parent 5ebe4db78c
commit 41014ef654
2 changed files with 8 additions and 2 deletions
@@ -4,7 +4,7 @@ export function securityHeaders(production: boolean, emojiImageCdn: string) {
  const adConnections = "https://*.adtrafficquality.google";
  const policy = [
    "default-src 'self'",
-    `script-src 'self' 'unsafe-inline' ${production ? "" : "'unsafe-eval'"} https://challenges.cloudflare.com ${cloudflareAnalytics} ${ads}`,
+    `script-src 'self' 'unsafe-inline' ${production ? "" : "'unsafe-eval'"} https://challenges.cloudflare.com ${cloudflareAnalytics} ${adConnections} ${ads}`,
    "style-src 'self' 'unsafe-inline'",
    `img-src 'self' data: blob: https://buzz-cdn.astrxl.dev ${emojiImageCdn} ${ads}`,
    "font-src 'self' data:",