05/06 admin login css issues

2026-05-06 17:09:55 -04:00
parent 51adb47da8
commit 04aae8bf5d
3 changed files with 7 additions and 6 deletions
@@ -16,8 +16,8 @@ def create_admin_app(config_override=None):
    flask_app = Flask(
        __name__,
        template_folder="../templates",
-        static_folder="../static",
-        static_url_path="/static/admin",
+        static_folder="../static/admin",
+        static_url_path="/static",
    )

    # ── Config ────────────────────────────────────────────────
@@ -34,8 +34,9 @@ def apply_security_headers(app):
        # Basic CSP — tightened further in Nginx for production
        response.headers["Content-Security-Policy"] = (
            "default-src 'self'; "
-            "script-src 'self'; "
-            "style-src 'self' 'unsafe-inline'; "
+            "script-src 'self' https://cdn.jsdelivr.net; "
+            "style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; "
+            "font-src 'self' https://cdn.jsdelivr.net; "
            "img-src 'self' data:; "
            "frame-ancestors 'none';"
        )
@@ -21,8 +21,8 @@ def create_tenant_app(config_override=None):
    flask_app = Flask(
        __name__,
        template_folder="../templates",
-        static_folder="../static",
-        static_url_path="/static/tenant",
+        static_folder="../static/tenant",
+        static_url_path="/static",
    )

    # ── Config ────────────────────────────────────────────────