Move CSP to proxy.ts instead of middleware.ts to avoid build conflict

Shipped

April 17, 2026 at 7:15 PM UTC

Author

Kamo

Commit

18d202d

Next.js 16 doesn't allow both middleware.ts and proxy.ts. The Docker build copies proxy.ts as the middleware, so add CSP frame-ancestors header there instead. This reads ALLOWED_FRAME_URLS at runtime.