Fix CSP connect-src to allow all local assets
The previous entry hardcoded a Vite-generated content-hash filename (onig-CwjCXqnP.wasm), which breaks whenever the file’s hash changes between builds. Replacing it with ‘self’ covers all same-origin assets regardless of filename.
👉 The previous entry hardcoded a Vite-generated content-hash filename (onig-CwjCXqnP.wasm), which breaks whenever the file’s hash changes between builds. Replacing it with ‘self’ covers all same-origin assets regardless of filename.
Rebase