Move CSP to proxy.ts instead of middleware.ts to avoid build conflict

Dikirim

17 April 2026 pukul 19.15 UTC

Penulis

Kamo

Commit

18d202d

Next.js 16 doesn't allow both middleware.ts and proxy.ts. The Docker build copies proxy.ts as the middleware, so add CSP frame-ancestors header there instead. This reads ALLOWED_FRAME_URLS at runtime.