From 0b6fdcabfb8a666c7d3c33be2d5b1989ec7b078b Mon Sep 17 00:00:00 2001
From: Linus Rath <139418639+rathlinus@users.noreply.github.com>
Date: Wed, 29 Apr 2026 13:55:38 +0200
Subject: [PATCH] fix: update connect-src to include http protocol in
 development mode

---
 proxy.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/proxy.ts b/proxy.ts
index 83f02039..5f965480 100644
--- a/proxy.ts
+++ b/proxy.ts
@@ -23,7 +23,7 @@ export async function proxy(request: NextRequest) {
     ? `'self' 'nonce-${nonce}' 'unsafe-eval' blob:`
     : `'self' 'nonce-${nonce}' blob:`;
 
-  const connectSrc = isDev ? `'self' https: ws: wss:` : `'self' https:`;
+  const connectSrc = isDev ? `'self' http: https: ws: wss:` : `'self' https:`;
 
   const frameAncestors = process.env.ALLOWED_FRAME_ANCESTORS?.trim() || "'none'";