fix: added media-src CSP rule for media attachments #209

2026-10-31 00:12:39 +00:00 · 2026-04-20 14:55:50 +02:00
parent 24c53e5ce7
commit 37bd490072
1 changed files with 1 additions and 0 deletions
@@ -28,6 +28,7 @@ export function proxy(request: NextRequest) {
    `base-uri 'self'`,
    `form-action 'self'`,
    `frame-ancestors ${frameAncestors}`,
+    `media-src 'self' blob:`,
  ].join("; ");

  // Skip intl middleware for /admin routes - they have their own layout