From 8458d638ecbf8f5020304d067d28d678f258e106 Mon Sep 17 00:00:00 2001
From: Tudor <tudor.sitaru@gmail.com>
Date: Fri, 9 Jan 2026 00:10:40 +0000
Subject: [PATCH] bug fix

---
 backend/app.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/backend/app.py b/backend/app.py
index f09a5d3..701c5fa 100644
--- a/backend/app.py
+++ b/backend/app.py
@@ -69,7 +69,7 @@ class SecurityHeadersMiddleware(BaseHTTPMiddleware):
             "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://unpkg.com; "
             "font-src 'self' https://fonts.gstatic.com; "
             "img-src 'self' data: https://*.tile.openstreetmap.org https://unpkg.com; "
-            "connect-src 'self' https://cdn.jsdelivr.net https://*.tile.openstreetmap.org; "
+            "connect-src 'self' https://cdn.jsdelivr.net https://*.tile.openstreetmap.org https://unpkg.com; "
             "frame-ancestors 'none'; "
             "base-uri 'self'; "
             "form-action 'self';"