codeflash-internal/js/cf-webapp
Aseem Saxena a3f0c07bb6
fix: allow Monaco editor CDN in CSP for trace page diffs (#2611)
## Summary
- The Monaco diff editor on `/trace/[id]` pages was not loading because
`@monaco-editor/react` fetches JS, CSS, and font assets from
`cdn.jsdelivr.net` by default
- The Content Security Policy in `next.config.mjs` blocked those
requests (missing from `script-src`, `style-src`, `font-src`)
- Added `https://cdn.jsdelivr.net` to the three relevant CSP directives

## Test plan
- [ ] Open a trace page (e.g.
`/trace/c0668bd3-9321-4082-9c43-3e41bdd9b1c5`) and verify the code diff
renders
- [ ] Check browser console for no remaining CSP violations
- [ ] Verify no regressions on other pages

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-authored-by: Sarthak Agarwal <sarthak.saga@gmail.com>
2026-04-22 04:07:40 +05:30
..
.playwright-mcp feat: add server action timing and expand PostHog analytics (#2552) 2026-04-04 11:34:53 -05:00
public perf: fix CI build + lazy-load heavy libs + parallelize DB queries (#2601) 2026-04-13 11:03:05 -05:00
scripts fix: make tree-sitter WASM build failure non-fatal when cache exists (#2602) 2026-04-13 11:43:07 -05:00
src fix: remove redundant auth check from roadmap page 2026-04-15 05:23:46 -05:00
.env.example fix: provide JWT_SECRET to CI build workflows (#2607) 2026-04-14 19:25:41 -05:00
.gitignore observability v2 toggle (#2378) 2026-02-07 15:50:12 -05:00
.prettierignore consistency in formatting across ide & js projs (#1499) 2025-03-04 23:52:45 +00:00
.prettierrc consistency in formatting across ide & js projs (#1499) 2025-03-04 23:52:45 +00:00
components.json Reformat 2023-12-04 17:54:33 -08:00
eslint.config.mjs Upgrade Next.js 14 → 16, React 18 → 19, and dependencies (#2385) 2026-04-02 22:38:01 -05:00
LANDING_PAGE_PERFORMANCE.md perf: Sentry-driven optimizations across all services (#2593) 2026-04-10 15:39:44 -05:00
next.config.mjs fix: allow Monaco editor CDN in CSP for trace page diffs (#2611) 2026-04-22 04:07:40 +05:30
package.json fix: add @swc/helpers as direct dependency for Azure deployment 2026-04-15 06:47:06 -05:00
postcss.config.js Reformat 2023-12-04 17:54:33 -08:00
prisma.config.ts perf: fix CI build + lazy-load heavy libs + parallelize DB queries (#2601) 2026-04-13 11:03:05 -05:00
README.md Webapp Authentication and API Key Token generation (#36) 2023-12-03 15:25:53 -08:00
roadmap.png feat: add server action timing and expand PostHog analytics (#2552) 2026-04-04 11:34:53 -05:00
sentry.server.config.ts feat: add observability stack (OTel, Sentry tuning, Prisma logging, bundle-analyzer) (#2547) 2026-04-04 11:27:10 -05:00
tailwind.config.js Lots of small layout tweaks, making wrapping responsive 2024-06-14 17:35:43 -07:00
tailwind.config.ts perf: Sentry-driven optimizations across all services (#2593) 2026-04-10 15:39:44 -05:00
tsconfig.json fix: provide JWT_SECRET to CI build workflows (#2607) 2026-04-14 19:25:41 -05:00
vitest.config.ts fix: provide JWT_SECRET to CI build workflows (#2607) 2026-04-14 19:25:41 -05:00

This is a Next.js project bootstrapped with create-next-app.

Getting Started

First, run the development server:

npm run dev
# or
yarn dev
# or
pnpm dev
# or
bun dev

Open http://localhost:3000 with your browser to see the result.

You can start editing the page by modifying app/page.tsx. The page auto-updates as you edit the file.

This project uses next/font to automatically optimize and load Inter, a custom Google Font.

Learn More

To learn more about Next.js, take a look at the following resources:

You can check out the Next.js GitHub repository - your feedback and contributions are welcome!

Deploy on Vercel

The easiest way to deploy your Next.js app is to use the Vercel Platform from the creators of Next.js.

Check out our Next.js deployment documentation for more details.