From c3b309413e8db01be6cbbaf50a0157c04fabf151 Mon Sep 17 00:00:00 2001
From: Developer <dev@quanyixiaozhushou.com>
Date: Sun, 17 May 2026 13:07:43 +0800
Subject: [PATCH] =?UTF-8?q?fix:=20=E6=94=BE=E5=AE=BDCSP=E7=AD=96=E7=95=A5?=
 =?UTF-8?q?=EF=BC=8C=E5=85=81=E8=AE=B8http=E5=92=8Cblob=E5=9B=BE=E7=89=87?=
 =?UTF-8?q?=E6=BA=90?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/app.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/app.js b/src/app.js
index 4a0e18f..b2a9bfc 100644
--- a/src/app.js
+++ b/src/app.js
@@ -35,8 +35,8 @@ app.use(helmet({
       scriptSrc: ["'self'", "'unsafe-inline'"],
       scriptSrcAttr: ["'unsafe-inline'"],
       styleSrc: ["'self'", "'unsafe-inline'", "https:"],
-      imgSrc: ["'self'", "data:", "https:"],
-      connectSrc: ["'self'", "https:"],
+      imgSrc: ["'self'", "data:", "https:", "http:", "blob:"],
+      connectSrc: ["'self'", "https:", "http:"],
     },
   },
 }));