From 93b51a0bf50b717d4694de7c51a9e2a4f02292ac Mon Sep 17 00:00:00 2001
From: jubnl <jgunther021@gmail.com>
Date: Wed, 13 May 2026 10:34:57 +0200
Subject: [PATCH] fix(csp): allow unsafe-eval for HEIC image conversion

---
 server/src/app.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server/src/app.ts b/server/src/app.ts
index c03c7583..0be79570 100644
--- a/server/src/app.ts
+++ b/server/src/app.ts
@@ -122,7 +122,7 @@ export function createApp(): express.Application {
     contentSecurityPolicy: {
       directives: {
         defaultSrc: ["'self'"],
-        scriptSrc: ["'self'", "'wasm-unsafe-eval'"],
+        scriptSrc: ["'self'", "'wasm-unsafe-eval'", "'unsafe-eval'"],
         styleSrc: ["'self'", "'unsafe-inline'", "https://fonts.googleapis.com", "https://unpkg.com"],
         imgSrc: ["'self'", "data:", "blob:", "https:"],
         connectSrc: [