Fix Content Security Policy for Ollama Connection

CSP Fix Applied:
 Added connect-src 'self' http://localhost:* ws://localhost:* to CSP
 Updated default-src to include http://localhost:*
 This allows fetch requests to Ollama API on localhost:11434

 Error Resolved:
 'Refused to connect' CSP violation error fixed
 AI connection should now work properly
 Fetch requests to localhost now permitted

 Status:
 CSP now allows AI connections while maintaining security
 Local AI integration should be fully functional
This commit is contained in:
dilgenfritz 2025-09-29 07:19:54 -05:00
parent 5e28163f7e
commit a80224aebd
1 changed files with 1 additions and 1 deletions

View File

@ -3,7 +3,7 @@
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta http-equiv="Content-Security-Policy" content="default-src 'self' 'unsafe-inline' 'unsafe-eval' data: file:; img-src 'self' data: file:; script-src 'self' 'unsafe-inline' 'unsafe-eval';">
<meta http-equiv="Content-Security-Policy" content="default-src 'self' 'unsafe-inline' 'unsafe-eval' data: file: http://localhost:*; connect-src 'self' http://localhost:* ws://localhost:*; img-src 'self' data: file:; script-src 'self' 'unsafe-inline' 'unsafe-eval';"">
<title>Edge & Punishment - How long can you last?</title>
<link rel="stylesheet" href="styles.css">
</head>