From 431e7c0553e00c9bdfc8213815d4cf7db48185d8 Mon Sep 17 00:00:00 2001
From: Ralksta <16941050+ralksta@users.noreply.github.com>
Date: Tue, 21 Apr 2026 22:51:50 +0200
Subject: [PATCH] =?UTF-8?q?=F0=9F=9B=A1=EF=B8=8F=20Sentinel:=20[improvemen?=
 =?UTF-8?q?t]=20Add=20Content=20Security=20Policy=20Report-Only=20header?=
 =?UTF-8?q?=20(#86)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-authored-by: google-labs-jules[bot] <161369871+google-labs-jules[bot]@users.noreply.github.com>
---
 next.config.ts | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/next.config.ts b/next.config.ts
index 3603284..7eb892f 100644
--- a/next.config.ts
+++ b/next.config.ts
@@ -25,6 +25,11 @@ const nextConfig: NextConfig = {
             value: 'max-age=31536000; includeSubDomains',
           },
           { key: 'X-DNS-Prefetch-Control', value: 'off' },
+          {
+            key: 'Content-Security-Policy-Report-Only',
+            value:
+              "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://*.basemaps.cartocdn.com; font-src 'self'; connect-src 'self';",
+          },
         ],
       },
     ];