From 9f79feec8ecdb5d4b67f61b4dd9aa17a6295baa5 Mon Sep 17 00:00:00 2001 From: Alex Holliday Date: Mon, 13 Jul 2026 10:10:28 -0700 Subject: [PATCH] add img.shields.io to csp directive --- server/src/app.ts | 1 + 1 file changed, 1 insertion(+) diff --git a/server/src/app.ts b/server/src/app.ts index f195d8140..12e552406 100644 --- a/server/src/app.ts +++ b/server/src/app.ts @@ -76,6 +76,7 @@ export const createApp = ({ directives: { upgradeInsecureRequests: null, "script-src": ["'self'", "'unsafe-inline'", "'unsafe-eval'"], + "img-src": ["'self'", "data:", "https://img.shields.io"], "object-src": ["'none'"], "base-uri": ["'self'"], },