From 5c68d84cff65695a95d5c8d1772123b79c74b87f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=D0=98=D0=BB=D1=8C=D1=8F=D1=81=20=D0=A1=D1=83=D0=BB=D1=82?= =?UTF-8?q?=D0=B0=D0=BD=D0=BE=D0=B2?= Date: Wed, 23 Sep 2026 10:25:27 +0300 Subject: [PATCH] =?UTF-8?q?fix(csp):=20=D1=80=D0=B0=D0=B7=D1=80=D0=B5?= =?UTF-8?q?=D1=88=D1=91=D0=BD=20core-renderer-tiles.maps.yandex.net=20(scr?= =?UTF-8?q?ipt-src)=20=E2=80=94=20=D0=AF=D0=BD=D0=B4=D0=B5=D0=BA=D1=81.?= =?UTF-8?q?=D0=9A=D0=B0=D1=80=D1=82=D1=8B=202.1=20=D0=B3=D1=80=D1=83=D0=B7?= =?UTF-8?q?=D0=B8=D1=82=20JSONP=20hit-test=20=D0=BE=D0=B1=D1=8A=D0=B5?= =?UTF-8?q?=D0=BA=D1=82=D0=BE=D0=B2=20=D1=81=20=D0=BD=D0=B5=D0=B3=D0=BE,?= =?UTF-8?q?=20=D0=B1=D0=BB=D0=BE=D0=BA=D0=B8=D1=80=D0=BE=D0=B2=D0=BA=D0=B0?= =?UTF-8?q?=20CSP=20=D0=BB=D0=BE=D0=BC=D0=B0=D0=BB=D0=B0=20=D0=BA=D0=BB?= =?UTF-8?q?=D0=B8=D0=BA=D0=B8=20=D0=BF=D0=BE=20=D0=BC=D0=B0=D1=80=D0=BA?= =?UTF-8?q?=D0=B5=D1=80=D0=B0=D0=BC?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- server/index.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/server/index.ts b/server/index.ts index a85c575..5daa34c 100644 --- a/server/index.ts +++ b/server/index.ts @@ -241,7 +241,7 @@ app.use(helmet({ contentSecurityPolicy: { directives: { defaultSrc: ["'self'"], - scriptSrc: ["'self'", "'unsafe-inline'", "'unsafe-eval'", "blob:", "https://api-maps.yandex.ru", "https://yastatic.net"], + scriptSrc: ["'self'", "'unsafe-inline'", "'unsafe-eval'", "blob:", "https://api-maps.yandex.ru", "https://yastatic.net", "https://*.maps.yandex.net"], styleSrc: ["'self'", "'unsafe-inline'", "https://fonts.googleapis.com"], imgSrc: ["'self'", "data:", "blob:", "https:", "http:"], connectSrc: ["'self'", "ws:", "wss:", "http:", "https:"],