fix(webrtc): configure external TURN server and update CSP to allow inline scripts

2026-07-06 12:20:53 +00:00
parent f9edd8c069
commit f9b1e16e3a
2 changed files with 7 additions and 1 deletions
@@ -11,7 +11,7 @@ func SecurityHeaders(next http.Handler) http.Handler {
 		w.Header().Set("X-Frame-Options", "DENY")
 		w.Header().Set("Referrer-Policy", "strict-origin-when-cross-origin")
 		w.Header().Set("Content-Security-Policy",
-			"default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; "+
+			"default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; "+
 				"img-src 'self' https: data:; connect-src 'self' wss: ws:; font-src 'self';")
 		w.Header().Set("Permissions-Policy", "camera=(), microphone=(self), geolocation=()")
 		next.ServeHTTP(w, r)