From 8fde238369dfd0a1d9ea733a663d70517049e3a1 Mon Sep 17 00:00:00 2001
From: Michael SCHAL <michaelschal@gmail.com>
Date: Thu, 22 Jan 2026 12:58:03 +0100
Subject: [PATCH] chore: Update server CSP configuration

---
 server/index.ts | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/server/index.ts b/server/index.ts
index 24c7abe..a498976 100644
--- a/server/index.ts
+++ b/server/index.ts
@@ -32,7 +32,8 @@ app.use(helmet({
       styleSrc: ["'self'", "'unsafe-inline'", "https://fonts.googleapis.com"],
       imgSrc: ["'self'", "data:", "https:", "blob:"],
       fontSrc: ["'self'", "https://fonts.gstatic.com"],
-      connectSrc: ["'self'", "https://graph.facebook.com", "https://openrouter.ai", "https://res.cloudinary.com", "wss:", "ws:"],
+      connectSrc: ["'self'", "https://graph.facebook.com", "https://openrouter.ai", "https://res.cloudinary.com", "https://freesound.org", "wss:", "ws:"],
+      mediaSrc: ["'self'", "https://cdn.freesound.org", "https:"],
     }
   },
   crossOriginEmbedderPolicy: false,