diff --git a/src/PowderCoating.Web/Program.cs b/src/PowderCoating.Web/Program.cs
index acb97e9..51f2d8a 100644
--- a/src/PowderCoating.Web/Program.cs
+++ b/src/PowderCoating.Web/Program.cs
@@ -634,7 +634,7 @@ app.Use(async (context, next) =>
         : "'self' 'unsafe-inline' https://cdn.jsdelivr.net https://code.jquery.com https://js.stripe.com";
 
     var cspConnectSrc = app.Environment.IsDevelopment()
-        ? "'self' wss://localhost:* https://cdn.jsdelivr.net https://api.stripe.com"  // Allow hot reload WebSocket in dev
+        ? "'self' ws://localhost:* wss://localhost:* https://cdn.jsdelivr.net https://api.stripe.com"  // Allow hot reload WebSocket in dev (ws:// for browser-refresh, wss:// for SignalR)
         : "'self' https://cdn.jsdelivr.net https://api.stripe.com";
 
     context.Response.Headers.Append("Content-Security-Policy",