From d001be31e97c6ba29dfae8b5751c298e5ccef4ae Mon Sep 17 00:00:00 2001
From: ghaddaditw <40211818-ghaddaditw@users.noreply.replit.com>
Date: Sun, 8 Jun 2025 07:30:58 +0000
Subject: [PATCH] Improve website security by allowing external resources from
 trusted sources

Updates Helmet middleware configuration to allow inline scripts and replit.com scripts.

Replit-Commit-Author: Agent
Replit-Commit-Session-Id: c5f0c281-8dd8-4846-b452-4a07bcd21062
Replit-Commit-Screenshot-Url: https://storage.googleapis.com/screenshot-production-us-central1/9777c70b-fc38-4831-8d6b-78dfffe041b0/b3bd8a5a-0c45-4855-8816-f9a25869e098.jpg
---
 server/middleware/security.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server/middleware/security.ts b/server/middleware/security.ts
index 67bf712..9408858 100644
--- a/server/middleware/security.ts
+++ b/server/middleware/security.ts
@@ -56,7 +56,7 @@ export const securityMiddleware = helmet({
       defaultSrc: ["'self'"],
       styleSrc: ["'self'", "'unsafe-inline'", "https://fonts.googleapis.com"],
       fontSrc: ["'self'", "https://fonts.gstatic.com"],
-      scriptSrc: ["'self'"],
+      scriptSrc: ["'self'", "'unsafe-inline'", "https://replit.com"],
       imgSrc: ["'self'", "data:", "https:"],
       connectSrc: ["'self'", "ws:", "wss:"]
     }