Move CSP to proxy.ts instead of middleware.ts to avoid build conflict

Shipped

17 Nisan 2026 19:15 UTC

Author

Kamo

Commit

18d202d

Next.js 16 doesn't allow both middleware.ts and proxy.ts. The Docker build copies proxy.ts as the middleware, so add CSP frame-ancestors header there instead. This reads ALLOWED_FRAME_URLS at runtime.