Merge pull request #1149 from objectstack-ai/claude/fix-cors-error-on-vercel-deployment

fix: add CSP headers to allow connections to *.objectstack.ai domain

Author: hotlong

apps/studio/vercel.json

@@ -17,6 +17,15 @@
     }
   },
   "headers": [
+    {
+      "source": "/(.*)",
+      "headers": [
+        {
+          "key": "Content-Security-Policy",
+          "value": "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' ws: wss: http://localhost:* https://*.objectstack.io https://*.objectstack.ai https://*.sentry.io"
+        }
+      ]
+    },
     {
       "source": "/assets/(.*)",
       "headers": [