From 10c9b802eb2ead8a82016c4049f372f63a168906 Mon Sep 17 00:00:00 2001
From: Dicken <dicken@noreply.localhost>
Date: Thu, 28 May 2026 09:29:26 +0200
Subject: [PATCH] Dateien nach "backend/src" hochladen

---
 backend/src/index.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/backend/src/index.js b/backend/src/index.js
index 4e0179f..463f4ab 100644
--- a/backend/src/index.js
+++ b/backend/src/index.js
@@ -17,8 +17,8 @@ app.use((_req, res, next) => {
     "font-src 'self' https://fonts.gstatic.com",
     // iCal-Feeds werden serverseitig geprosxt → nur 'self' nötig
     "connect-src 'self'",
-    // data: für Avatare (base64), google.com für Favicons im QuickLinks-Widget
-    "img-src 'self' data: https://www.google.com",
+    // data: für Avatare (base64), google.com + gstatic.com für Favicons im QuickLinks-Widget
+    "img-src 'self' data: https://www.google.com https://t1.gstatic.com https://t2.gstatic.com https://t3.gstatic.com",
     "worker-src 'self'",
     "object-src 'none'",
     "base-uri 'self'",