From e91ee04d934c0dcf60575092123713ca00fd9184 Mon Sep 17 00:00:00 2001 From: jubnl Date: Fri, 10 Apr 2026 01:10:21 +0200 Subject: [PATCH] fix(csp): disable Vite module preload polyfill to prevent inline script violation The polyfill was injected as an inline script at build time, causing a hard CSP block under script-src 'self'. All browsers that support ES modules also support modulepreload natively, so the polyfill is unnecessary. --- client/vite.config.js | 1 + 1 file changed, 1 insertion(+) diff --git a/client/vite.config.js b/client/vite.config.js index 453b6e16..64292ae3 100644 --- a/client/vite.config.js +++ b/client/vite.config.js @@ -90,6 +90,7 @@ export default defineConfig({ ], build: { sourcemap: false, + modulePreload: { polyfill: false }, }, server: { port: 5173,