|
|
@ -39,7 +39,7 @@ async function bootstrap() {
|
|
|
|
helmet({
|
|
|
|
helmet({
|
|
|
|
contentSecurityPolicy: {
|
|
|
|
contentSecurityPolicy: {
|
|
|
|
directives: {
|
|
|
|
directives: {
|
|
|
|
scriptSrc: ["'self'", "'unsafe-inline'"], // Allow inline scripts
|
|
|
|
scriptSrc: ["'self'", "'unsafe-inline'", 'https://js.stripe.com'], // Allow inline scripts
|
|
|
|
scriptSrcAttr: ["'self'", "'unsafe-inline'"], // Allow inline event handlers
|
|
|
|
scriptSrcAttr: ["'self'", "'unsafe-inline'"], // Allow inline event handlers
|
|
|
|
styleSrc: ["'self'", "'unsafe-inline'"] // Allow inline styles
|
|
|
|
styleSrc: ["'self'", "'unsafe-inline'"] // Allow inline styles
|
|
|
|
}
|
|
|
|
}
|
|
|
|