From 43ba386da92ce28a0c64cfbe5cc28d4e75c5730f Mon Sep 17 00:00:00 2001
From: Deep Koluguri <deepkoluguri@gmail.com>
Date: Wed, 24 Jun 2026 19:23:18 -0400
Subject: [PATCH] fix: CORP header for Cloudflare proxy

---
 backend/src/middleware/security.js | 1 +
 1 file changed, 1 insertion(+)

diff --git a/backend/src/middleware/security.js b/backend/src/middleware/security.js
index 2badf8f..6baffcc 100644
--- a/backend/src/middleware/security.js
+++ b/backend/src/middleware/security.js
@@ -18,6 +18,7 @@ export const setupSecurity = (app) => {
       },
     },
     crossOriginEmbedderPolicy: false,
+    crossOriginResourcePolicy: { policy: 'cross-origin' },
   }));
 
   // CORS