fix(CSP): Paths that end in / match any path they are a prefix of.

2026-04-05 22:20:40 +02:00
parent 9718187490
commit 9ebca725ae
1 changed files with 1 additions and 1 deletions
--- a/server/src/app.ts
+++ b/server/src/app.ts
@@ -84,7 +84,7 @@ export function createApp(): express.Application {
          "https://unpkg.com", "https://open-meteo.com", "https://api.open-meteo.com",
          "https://geocoding-api.open-meteo.com", "https://api.exchangerate-api.com",
          "https://raw.githubusercontent.com/nvkelso/natural-earth-vector/master/geojson/ne_50m_admin_0_countries.geojson",
-          "https://router.project-osrm.org/route/v1"
+          "https://router.project-osrm.org/route/v1/"
        ],
        fontSrc: ["'self'", "https://fonts.gstatic.com", "data:"],
        objectSrc: ["'none'"],