fix: bump ciphera-ui to 0.2.3 and allow blob: in worker-src CSP

Adds blob: to worker-src so the captcha PoW web worker can run.
2026-03-11 11:53:04 +01:00
parent 15d41f5bd9
commit 8136268988
3 changed files with 6 additions and 6 deletions
--- a/next.config.ts
+++ b/next.config.ts
@@ -16,7 +16,7 @@ const cspDirectives = [
  "img-src 'self' data: blob: https://www.google.com https://*.gstatic.com https://ciphera.net",
  "font-src 'self'",
  `connect-src 'self' https://*.ciphera.net https://ciphera.net https://www.google.com https://*.gstatic.com https://cdn.jsdelivr.net${process.env.NODE_ENV === 'development' ? ' http://localhost:*' : ''}`,
-  "worker-src 'self'",
+  "worker-src 'self' blob:",
  "frame-src 'none'",
  "object-src 'none'",
  "base-uri 'self'",