From d80cfe74f070a909c7df9a8095704f46ee255cee Mon Sep 17 00:00:00 2001
From: Ajay Ghanwat <ghanwat.ajay@workroot.in>
Date: Mon, 3 Aug 2026 00:26:52 +0530
Subject: [PATCH] fix: use current production CSP configuration

---
 app/docs.test.ts  | 4 ++++
 wrnexus.config.ts | 2 +-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/app/docs.test.ts b/app/docs.test.ts
index df1ccf11..38635c27 100644
--- a/app/docs.test.ts
+++ b/app/docs.test.ts
@@ -128,6 +128,10 @@ test("site includes core guides and production configuration", () => {
   expect(readFileSync(join(root, "wrnexus.config.ts"), "utf8")).toContain(
     "WRNexusJS Documentation",
   );
+  const config = readFileSync(join(root, "wrnexus.config.ts"), "utf8");
+  expect(config).toContain("contentSecurityPolicy:");
+  expect(config).not.toMatch(/^\s*csp:\s*\{/m);
+  expect(config).toContain('"connect-src": ["\'self\'", "https://fonts.gstatic.com"]');
 });
 
 test("language reference covers directives, events, loops, and conditionals", () => {
diff --git a/wrnexus.config.ts b/wrnexus.config.ts
index 67948027..6717d3b7 100644
--- a/wrnexus.config.ts
+++ b/wrnexus.config.ts
@@ -35,7 +35,7 @@ const config: AppConfig = {
       referrerPolicy: "strict-origin-when-cross-origin",
       permissionsPolicy: "camera=(), microphone=(), geolocation=()",
     },
-    csp: {
+    contentSecurityPolicy: {
       enabled: true,
       directives: {
         "default-src": ["'self'"],