stash

frontend/vite.config.js

@@ -22,8 +22,8 @@ export default defineConfig({
             'Content-Security-Policy': 'default-src \'self\';'
                 + ' script-src \'self\' \'wasm-unsafe-eval\';'
                 + ' style-src \'self\' \'unsafe-inline\';'
-                + ' img-src \'self\' data:; '
-                + ' connect-src * data:', // TODO: change * to https://* for production (probably in nginx config not here)
+                + ' img-src \'self\' https://* data:;'
+                + ' connect-src https://* data:',
         },
     },
     test: {