From 70cb874ff56b6d0bce3f20e8bfe5e00fa325bbca Mon Sep 17 00:00:00 2001
From: Stefan Lazic <s.lazic@edynamix.com>
Date: Sun, 18 Oct 2026 11:40:19 +0100
Subject: [PATCH] Update proxy.ts

---
 src/proxy.ts | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/proxy.ts b/src/proxy.ts
index 4505b33..afe7abc 100644
--- a/src/proxy.ts
+++ b/src/proxy.ts
@@ -75,6 +75,9 @@ function buildCsp(): string {
     // loads generally.
     "img-src 'self' data: https:",
     "font-src 'self'",
+    // The Home page's "Find us" map is a Google Maps embed (see (customer)/home/page.tsx); without this it falls
+    // back to default-src 'self' and the browser refuses to load the frame. Only that one origin is allowed.
+    "frame-src https://www.google.com",
     "connect-src 'self'",
     "worker-src 'self'",
     "manifest-src 'self'",