Set worker-src CSP to also allow https:

Kagemaru · Kagemaru · commit 5857eb3207a3 · 2025-07-03T15:59:43.000+02:00
diff --git a/config/initializers/decidim.rb b/config/initializers/decidim.rb
@@ -141,7 +141,7 @@
 
   config.content_security_policies_extra = {
     "connect-src" => "photon.komoot.io",
-    "worker-src" => %w('self')
+    "worker-src" => %w('self', 'https:')
   }
 
   if Rails.application.secrets.maps.present? && Rails.application.secrets.maps[:static_provider].present?

Original file line number	Diff line number	Diff line change
`@@ -141,7 +141,7 @@`
`141`	`141`
`142`	`142`	`config.content_security_policies_extra = {`
`143`	`143`	`"connect-src" => "photon.komoot.io",`
`144`		`- "worker-src" => %w('self')`
	`144`	`+ "worker-src" => %w('self', 'https:')`
`145`	`145`	`}`
`146`	`146`
`147`	`147`	`if Rails.application.secrets.maps.present? && Rails.application.secrets.maps[:static_provider].present?`