Koko210/immich-folio
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: allow inline scripts in CSP for Next.js hydration

Browse Source 
script-src 'self' was blocking all Next.js inline hydration scripts,
preventing client-side JS from running. This caused fade-in items to
stay at opacity:0 (empty grid). Added 'unsafe-inline' until Next.js
App Router supports nonce-based CSP.
This commit is contained in:
ralksta
2026-02-15 22:19:07 +01:00
parent d2f15401c9
commit ec9ad45475
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
next.config.ts
View File

@@ -4,7 +4,7 @@ import type { NextConfig } from 'next';
// Locks down the public-facing site to only trusted sources. // Locks down the public-facing site to only trusted sources.
const cspDirectives = [ const cspDirectives = [
"default-src 'self'", "default-src 'self'",
"script-src 'self'", "script-src 'self' 'unsafe-inline'",
"style-src 'self' 'unsafe-inline' https://fonts.googleapis.com", "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com",
"font-src 'self' https://fonts.gstatic.com", "font-src 'self' https://fonts.gstatic.com",
"img-src 'self' data:", "img-src 'self' data:",