From 474082fa3515227423beaa3bd193461bbaaa08f1 Mon Sep 17 00:00:00 2001
From: Andras Schmelczer <andras@schmelczer.dev>
Date: Sun, 31 Aug 2025 15:18:41 +0100
Subject: [PATCH] Fix CSP

---
 backend/public/admin.js   | 6 ++++++
 backend/public/index.html | 9 +--------
 2 files changed, 7 insertions(+), 8 deletions(-)

diff --git a/backend/public/admin.js b/backend/public/admin.js
index 4739746..80b2086 100644
--- a/backend/public/admin.js
+++ b/backend/public/admin.js
@@ -1,5 +1,11 @@
 const API_BASE = window.location.origin;
 
+window.plausible =
+  window.plausible ||
+  function () {
+    (window.plausible.q = window.plausible.q || []).push(arguments);
+  };
+
 document.addEventListener("DOMContentLoaded", function () {
   loadQuestions();
   loadImages();
diff --git a/backend/public/index.html b/backend/public/index.html
index d6830c9..128c321 100644
--- a/backend/public/index.html
+++ b/backend/public/index.html
@@ -6,7 +6,7 @@
     <title>Fizika Admin - Kérdések és képek kezelése</title>
     <meta
       http-equiv="Content-Security-Policy"
-      content="script-src 'self' https://stats.schmelczer.dev;"
+      content="script-src 'self' https://stats.schmelczer.dev 'unsafe-inline';"
     />
     <script
       defer
@@ -14,13 +14,6 @@
       data-api="https://stats.schmelczer.dev/status"
       src="https://stats.schmelczer.dev/js/script.file-downloads.hash.outbound-links.js"
     ></script>
-    <script>
-      window.plausible =
-        window.plausible ||
-        function () {
-          (window.plausible.q = window.plausible.q || []).push(arguments);
-        };
-    </script>
     <style>
       * {
         margin: 0;