diff --git a/backend/app.py b/backend/app.py index e3b8c3e..ef4b7a0 100644 --- a/backend/app.py +++ b/backend/app.py @@ -70,7 +70,7 @@ class SecurityHeadersMiddleware(BaseHTTPMiddleware): "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; " "font-src 'self' https://fonts.gstatic.com; " "img-src 'self' data:; " - "connect-src 'self'; " + "connect-src 'self' https://cdn.jsdelivr.net; " "frame-ancestors 'none'; " "base-uri 'self'; " "form-action 'self';"