fix: render PDF previews via <object> with blob: in object-src CSP #253

2026-05-06 00:54:46 +02:00
parent 9639a6bb75
commit e7be3d1e0c
2 changed files with 11 additions and 6 deletions
@@ -43,7 +43,7 @@ export async function proxy(request: NextRequest) {
    `font-src 'self'`,
    `connect-src ${connectSrc}`,
    frameSrc,
-    `object-src 'none'`,
+    `object-src 'self' blob:`,
    `base-uri 'self'`,
    `form-action 'self'`,
    `frame-ancestors ${frameAncestors}`,