ralksta 9b053e1648 fix: exclude /admin from CSP middleware to prevent script blocking ...

The admin panel is a static page with client-side React that gets
prerendered at build time. The nonce-based CSP from middleware doesn't
work for static pages because the nonce is generated per-request but
the HTML is served from cache without it. Exclude /admin from the
middleware matcher so its scripts can load normally.

2026-05-29 17:09:53 +02:00

2.3 KiB

Raw Blame History

View Raw