From 9ebca725ae8d938efa7c41ea002ddb357ab8c5f4 Mon Sep 17 00:00:00 2001 From: jubnl Date: Sun, 5 Apr 2026 22:20:40 +0200 Subject: [PATCH] fix(CSP): Paths that end in / match any path they are a prefix of. --- server/src/app.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/server/src/app.ts b/server/src/app.ts index bc36d97..33bf1ff 100644 --- a/server/src/app.ts +++ b/server/src/app.ts @@ -84,7 +84,7 @@ export function createApp(): express.Application { "https://unpkg.com", "https://open-meteo.com", "https://api.open-meteo.com", "https://geocoding-api.open-meteo.com", "https://api.exchangerate-api.com", "https://raw.githubusercontent.com/nvkelso/natural-earth-vector/master/geojson/ne_50m_admin_0_countries.geojson", - "https://router.project-osrm.org/route/v1" + "https://router.project-osrm.org/route/v1/" ], fontSrc: ["'self'", "https://fonts.gstatic.com", "data:"], objectSrc: ["'none'"],