From a689b1752d110ca2e9e89bd89a16d77a5574fc85 Mon Sep 17 00:00:00 2001
From: Scott Pouliot <spouliot@scppowdercoating.com>
Date: Mon, 4 May 2026 23:31:06 -0400
Subject: [PATCH] Fix service worker intercepting cross-origin image fetches,
 breaking CSP connect-src

---
 src/PowderCoating.Web/wwwroot/sw.js | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/src/PowderCoating.Web/wwwroot/sw.js b/src/PowderCoating.Web/wwwroot/sw.js
index 692086c..17140e7 100644
--- a/src/PowderCoating.Web/wwwroot/sw.js
+++ b/src/PowderCoating.Web/wwwroot/sw.js
@@ -5,4 +5,7 @@
 
 self.addEventListener('install', () => self.skipWaiting());
 self.addEventListener('activate', e => e.waitUntil(self.clients.claim()));
-self.addEventListener('fetch', e => e.respondWith(fetch(e.request)));
+self.addEventListener('fetch', e => {
+    if (new URL(e.request.url).origin !== self.location.origin) return;
+    e.respondWith(fetch(e.request));
+});