From 9e36c686d2eb6211ae2597e341de0fc67fff8f2d Mon Sep 17 00:00:00 2001 From: Etienne Stalmans Date: Sat, 7 Mar 2026 11:37:22 +0100 Subject: [PATCH] chore: unsafe-eval --- apps/www/next.config.mjs | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/apps/www/next.config.mjs b/apps/www/next.config.mjs index ba3cad9b6e8..87b4252a518 100644 --- a/apps/www/next.config.mjs +++ b/apps/www/next.config.mjs @@ -36,11 +36,12 @@ const withBundleAnalyzer = bundleAnalyzer({ const isPreview = process.env.NEXT_PUBLIC_IS_PLATFORM === 'true' && process.env.VERCEL === '1' && process.env.VERCEL_ENV === 'preview' const scriptSrc = [ - "'unsafe-inline'", + "'self' 'unsafe-inline' 'unsafe-eval'", "https://frontend-assets.supabase.com", - "https://ph.supabase.green", - "https://ph.supabase.com", - isPreview ? "https://*.vercel.app/" : "", + "https://ss.supabase.com", + isPreview ? "https://ph.supabase.green": "https://ph.supabase.com", + isPreview ? "https://*.vercel.app/" : "", // preview domain + isPreview ? "https://vercel.live" : "", // debugger ].filter(Boolean).join(" ") const cspString = [ @@ -115,7 +116,7 @@ const nextConfig = { }, { key: 'X-Content-Type-Options', - value: 'no-sniff', + value: 'nosniff', }, { key: 'Referrer-Policy',