lunanting/ai-chatbot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: allow next inline scripts in csp
Some checks failed
Lint / build (20) (push) Has been cancelled
Details

Browse Source
This commit is contained in:
Your Name 2026-05-07 21:26:35 +08:00
parent 66fd760b9a
commit 4ce8562fd8
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
next.config.ts
View File

@ -40,8 +40,8 @@ const nextConfig: NextConfig = {
const isDev = process.env.NODE_ENV === "development"; const isDev = process.env.NODE_ENV === "development";
const csp = [ const csp = [
"default-src 'self'", "default-src 'self'",
// Next.js 需要 unsafe-eval 用于开发模式 (Fast Refresh / Turbopack) // Next.js App Router/RSC emits inline bootstrap scripts in production.
`script-src 'self'${isDev ? " 'unsafe-eval'" : ""}`, `script-src 'self' 'unsafe-inline'${isDev ? " 'unsafe-eval'" : ""}`,
// Next.js 需要 unsafe-inline 用于样式 (CSS-in-JS / Tailwind) // Next.js 需要 unsafe-inline 用于样式 (CSS-in-JS / Tailwind)
"style-src 'self' 'unsafe-inline'", "style-src 'self' 'unsafe-inline'",
"img-src 'self' data: blob: https: http:", "img-src 'self' data: blob: https: http:",