From 4a8260dfbca65aae170ff153e566e3b5b46181fd Mon Sep 17 00:00:00 2001 From: Maurice Date: Sun, 19 Apr 2026 13:23:50 +0200 Subject: [PATCH] allow mapbox-gl in CSP (api, tiles, events, blob workers) --- server/src/app.ts | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/server/src/app.ts b/server/src/app.ts index f9c190d3..923c9d89 100644 --- a/server/src/app.ts +++ b/server/src/app.ts @@ -94,8 +94,11 @@ export function createApp(): express.Application { "https://unpkg.com", "https://open-meteo.com", "https://api.open-meteo.com", "https://geocoding-api.open-meteo.com", "https://api.exchangerate-api.com", "https://raw.githubusercontent.com/nvkelso/natural-earth-vector/master/geojson/ne_50m_admin_0_countries.geojson", - "https://router.project-osrm.org/route/v1/" + "https://router.project-osrm.org/route/v1/", + "https://api.mapbox.com", "https://*.tiles.mapbox.com", "https://events.mapbox.com" ], + workerSrc: ["'self'", "blob:"], + childSrc: ["'self'", "blob:"], fontSrc: ["'self'", "https://fonts.gstatic.com", "data:"], objectSrc: ["'none'"], frameSrc: ["'none'"],