From 5978eec270b3ba615a587e78925425e0650ac911 Mon Sep 17 00:00:00 2001
From: Maurice <mauriceboe@icloud.com>
Date: Sun, 19 Apr 2026 13:42:09 +0200
Subject: [PATCH] allow WebAssembly in CSP for mapbox-gl 3D rendering

---
 server/src/app.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server/src/app.ts b/server/src/app.ts
index 923c9d89..c4788faa 100644
--- a/server/src/app.ts
+++ b/server/src/app.ts
@@ -82,7 +82,7 @@ export function createApp(): express.Application {
     contentSecurityPolicy: {
       directives: {
         defaultSrc: ["'self'"],
-        scriptSrc: ["'self'"],
+        scriptSrc: ["'self'", "'wasm-unsafe-eval'"],
         styleSrc: ["'self'", "'unsafe-inline'", "https://fonts.googleapis.com", "https://unpkg.com"],
         imgSrc: ["'self'", "data:", "blob:", "https:"],
         connectSrc: [