From 166ef2e2fb46800ede8336b783a319d340ee72c2 Mon Sep 17 00:00:00 2001 From: nmemmert Date: Tue, 13 Oct 2026 11:39:40 -0400 Subject: [PATCH] CSP: allow Ko-fi widget, Cloudflare Insights beacon and Truth for Life styles; v2.36.3 Co-Authored-By: Claude Sonnet 5.5 --- package.json | 2 +- server.js | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package.json b/package.json index a427bd8..aee5494 100644 --- a/package.json +++ b/package.json @@ -1,7 +1,7 @@ { "name": "siteforge", "private": true, - "version": "2.36.2", + "version": "2.36.3", "type": "module", "scripts": { "dev": "vite", diff --git a/server.js b/server.js index 6616877..0314c14 100644 --- a/server.js +++ b/server.js @@ -96,8 +96,8 @@ app.use((_req, res, next) => { 'Content-Security-Policy', [ "default-src 'self'", - "script-src 'self' 'unsafe-inline' https://www.truthforlife.org https://ajax.googleapis.com", - "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com", + "script-src 'self' 'unsafe-inline' https://www.truthforlife.org https://ajax.googleapis.com https://storage.ko-fi.com https://static.cloudflareinsights.com", + "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.truthforlife.org", "font-src 'self' https://fonts.gstatic.com", "img-src 'self' data: https:", "media-src 'self' https:",