Read ALLOWED_FRAME_URLS at runtime so CSP frame-ancestors works in standalone mode

Fixkamo-analytics
Shipped
17 Aprili 2026, 19:04 UTC
Author
Kamo
Commit
dd02991

The env var was being read at module scope during build, baking an empty value into the standalone server. Move CSP and all header construction into functions called by the async headers() callback so they resolve at request time with the runtime environment.

All changes

Je, unaona nini kuhusu usafiri?

Kila moja ya hizi updates ardhi katika nafasi yako ya kazi moja kwa moja. Kuanza bure na kuangalia kukua wiki baada ya wiki.

Kuwa Huru MileleMtazamo wa bei