diff --git a/backend/src/index.js b/backend/src/index.js index c16df2f..99ccdd9 100644 --- a/backend/src/index.js +++ b/backend/src/index.js @@ -35,7 +35,7 @@ app.use((_req, res, next) => { // iCal-Feeds werden serverseitig geprosxt → nur 'self' nötig "connect-src 'self'", // data: für Avatare (base64), google.com + gstatic.com für Favicons im QuickLinks-Widget - "img-src 'self' data: https://www.google.com https://*.gstatic.com", + "img-src 'self' data: https://www.google.com https://*.gstatic.com https://image.tmdb.org", "worker-src 'self'", "object-src 'none'", "base-uri 'self'", diff --git a/frontend/src/tools/media.jsx b/frontend/src/tools/media.jsx index f82b3c6..2115b75 100644 --- a/frontend/src/tools/media.jsx +++ b/frontend/src/tools/media.jsx @@ -113,7 +113,7 @@ export default function Media({ toast, mobile, nav }) { } // ── Film-Karte ──────────────────────────────────────────────────────────────── -function MovieCard({ movie, favIds, onToggleFav }) { +function MovieCard({ movie, rank, favIds, onToggleFav }) { const isFav = favIds.has(movie.id); const releaseDE = movie.release_date ? new Date(movie.release_date).toLocaleDateString('de-DE', { day:'2-digit', month:'2-digit', year:'numeric' }) @@ -131,6 +131,14 @@ function MovieCard({ movie, favIds, onToggleFav }) { :