fix: add cdn.jsdelivr.net to CSP for Monaco editor

batalabs · batalabs · commit f8436b41de95 · 2025-11-03T10:57:42.000-05:00
diff --git a/nginx.conf.template b/nginx.conf.template
@@ -39,7 +39,7 @@ http {
         add_header X-Frame-Options "SAMEORIGIN" always;
         add_header X-Content-Type-Options "nosniff" always;
         add_header X-XSS-Protection "1; mode=block" always;
-        add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://clerk.typelets.com https://*.clerk.accounts.dev https://static.cloudflareinsights.com; script-src-elem 'self' 'unsafe-inline' https://clerk.typelets.com https://*.clerk.accounts.dev https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://clerk.typelets.com https://fonts.googleapis.com; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://clerk.typelets.com; img-src 'self' data: https: blob:; font-src 'self' data: https://clerk.typelets.com https://fonts.gstatic.com; connect-src 'self' https://clerk.typelets.com https://*.clerk.accounts.dev https://cloudflareinsights.com wss://ws-api.typelets.com https://api.typelets.com; frame-src 'self' https://clerk.typelets.com https://*.clerk.accounts.dev https://challenges.cloudflare.com; worker-src 'self' blob:;" always;
+        add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://clerk.typelets.com https://*.clerk.accounts.dev https://static.cloudflareinsights.com https://cdn.jsdelivr.net; script-src-elem 'self' 'unsafe-inline' https://clerk.typelets.com https://*.clerk.accounts.dev https://static.cloudflareinsights.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://clerk.typelets.com https://fonts.googleapis.com; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://clerk.typelets.com; img-src 'self' data: https: blob:; font-src 'self' data: https://clerk.typelets.com https://fonts.gstatic.com; connect-src 'self' https://clerk.typelets.com https://*.clerk.accounts.dev https://cloudflareinsights.com wss://ws-api.typelets.com https://api.typelets.com; frame-src 'self' https://clerk.typelets.com https://*.clerk.accounts.dev https://challenges.cloudflare.com; worker-src 'self' blob:;" always;
 
         # === Proxy API requests to backend service ===
         location /api/ {
diff --git a/tsconfig.json b/tsconfig.json
@@ -15,6 +15,5 @@
         "./src/*"
       ]
     }
-  },
-  "extends": "expo/tsconfig.base"
+  }
 }

Original file line number	Diff line number	Diff line change
`@@ -15,6 +15,5 @@`
`15`	`15`	`"./src/*"`
`16`	`16`	`]`
`17`	`17`	`}`
`18`		`- },`
`19`		`- "extends": "expo/tsconfig.base"`
	`18`	`+ }`
`20`	`19`	`}`