Update CSP to fix PDF download in Firefox

Syslifters · Jan 15, 2025 · eeb42c6 · eeb42c6
1 parent f803a20
commit eeb42c6
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/api/src/reportcreator_api/conf/settings.py b/api/src/reportcreator_api/conf/settings.py
@@ -429,9 +429,10 @@ def remove_empty_items(lst=None):
         'font-src': [SELF],
         'worker-src': [SELF],
         'connect-src': [SELF, 'data:', 'https://portal.sysreptor.com'],
-        'frame-src': [SELF],
         'frame-ancestors': [SELF],
         'form-action': [SELF],
+        # PDF.js in Firefox requires "blob:" for saving/downloading PDFs
+        'frame-src': [SELF, 'blob:'],
         # nuxt, vuetify and markdown preview use inline styles
         'style-src': [SELF, UNSAFE_INLINE],
         'script-src': [

diff --git a/packages/frontend/nuxt.config.ts b/packages/frontend/nuxt.config.ts
@@ -50,6 +50,9 @@ export default defineNuxtConfig({
     optimizeDeps: {
       include: ['vuedraggable', 'monaco-editor', '@github/webauthn-json/browser-ponyfill'],
     },
+    worker: {
+      format: 'es',
+    },
     server: {
       proxy: {
         '/api': {