From af4bf3d088fd77a3ee8c1bb6f39747c86b46d620 Mon Sep 17 00:00:00 2001 From: Anthony Ettinger Date: Mon, 26 Oct 2026 18:56:51 +0000 Subject: [PATCH] CSP: allow the footer's built.indie badge image img-src blocked https://built.indie.pit.world/for.svg, the footer badge. Co-Authored-By: Claude Opus 5.5 --- apps/web/next.config.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/web/next.config.ts b/apps/web/next.config.ts index d7d6712..81a1afa 100644 --- a/apps/web/next.config.ts +++ b/apps/web/next.config.ts @@ -16,7 +16,7 @@ const CSP = [ "default-src 'self'", "script-src 'self' 'unsafe-inline' https://crawlproof.com", "style-src 'self' 'unsafe-inline'", - "img-src 'self' data: blob: https://pwamart.com", + "img-src 'self' data: blob: https://pwamart.com https://built.indie.pit.world", "font-src 'self' data:", "connect-src 'self' https://crawlproof.com https://pit.world", // The home page ad.network unit is an iframe to crawlproof's ad frame.