From 0cb4f515ceb4a44cba07648ca445daee6af87b6a Mon Sep 17 00:00:00 2001
From: Hadi <112569860+anotherhadi@users.noreply.github.com>
Date: Mon, 16 Mar 2026 23:14:11 +0100
Subject: [PATCH] Add umami to CORS

Signed-off-by: Hadi <112569860+anotherhadi@users.noreply.github.com>
---
 src/middleware.ts | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/middleware.ts b/src/middleware.ts
index 1755409..2884717 100644
--- a/src/middleware.ts
+++ b/src/middleware.ts
@@ -53,8 +53,8 @@ const SECURITY_HEADERS: Record<string, string> = {
     "default-src 'self'",
     "img-src 'self' cdn.jsdelivr.net data:",
     "style-src 'self' 'unsafe-inline'",
-    "script-src 'self' 'unsafe-inline' static.cloudflareinsights.com",
-    "connect-src 'self' cloudflareinsights.com",
+    "script-src 'self' 'unsafe-inline' static.cloudflareinsights.com umami.hadi.diy",
+    "connect-src 'self' cloudflareinsights.com umami.hadi.diy",
     "frame-ancestors 'none'",
   ].join("; "),
 };