Upload server.js

server.js

@@ -8,7 +8,17 @@ const app = express();
 const PORT = process.env.PORT || 7860;
 
 // 安全中间件
-app.use(helmet());
+app.use(helmet({
+    contentSecurityPolicy: {
+      directives: {
+        defaultSrc: ["'self'"],
+        scriptSrc: ["'self'", "'unsafe-inline'"],
+        styleSrc: ["'self'", "'unsafe-inline'"],
+        imgSrc: ["'self'", "data:", "blob:"],
+        connectSrc: ["'self'"]
+      }
+    }
+  }));
 app.use(cors());
 app.use(express.json());