restrictive csp

Author: thefirehacker

lib/common-meta.js

@@ -6,7 +6,7 @@
 
 const COMMON_META = {
   // Content Security Policy
-  csp: "script-src 'self' 'unsafe-eval' 'unsafe-inline' https: data: blob:; style-src 'self' 'unsafe-inline' https: data:; connect-src 'self' https: wss: http://localhost:1234 http://localhost:11434 https://beluga.bubblspace.com https://api.openai.com https://api.anthropic.com https://openrouter.ai; img-src 'self' data: https: blob:; font-src 'self' data: https:; worker-src 'self' blob: data:; object-src 'none';",
+  csp: "script-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob:; style-src 'self' 'unsafe-inline' data:; connect-src 'self' wss://api.openai.com wss://api.anthropic.com http://localhost:1234 http://localhost:11434 https://beluga.bubblspace.com https://api.openai.com https://api.anthropic.com https://openrouter.ai; img-src 'self' data: blob:; font-src 'self' data:; worker-src 'self' blob: data:; object-src 'none';",
 
   // Common favicon
   favicon: "lib/Media/TimeCapsule_04.png",