fix: Lucide Icons lokal ausliefern statt CDN

- lucide.min.js v0.469.0 lokal gecacht (kein unpkg-Request mehr) - Source-Map-Referenz aus Bundle entfernt (behebt NetworkError in DevTools) - unpkg.com aus CSP entfernt (nicht mehr benötigt) - preconnect zu unpkg.com aus index.html entfernt - lucide.min.js zum SW-App-Shell-Cache hinzugefügt Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-25 09:42:05 +01:00
parent b08ba42b89
commit 03585662fb
4 changed files with 16 additions and 7 deletions
@@ -13,8 +13,7 @@
  <link rel="icon" type="image/x-icon" href="/favicon.ico" />
  <link rel="icon" type="image/png" sizes="32x32" href="/icons/favicon-32.png" />

-  <!-- DNS-Prefetch + Preconnect für externe Ressourcen -->
-  <link rel="preconnect" href="https://unpkg.com" crossorigin />
+  <!-- DNS-Prefetch für externe Ressourcen -->
  <link rel="dns-prefetch" href="https://openweathermap.org" />

  <!-- Preload: kritische ES-Module (modulepreload ist korrekt für type="module") -->
@@ -36,8 +35,8 @@
  <link rel="stylesheet" href="/styles/budget.css" />
  <link rel="stylesheet" href="/styles/settings.css" />

-  <!-- Lucide Icons (CDN) -->
-  <script src="https://unpkg.com/lucide@latest/dist/umd/lucide.min.js"></script>
+  <!-- Lucide Icons (lokal, v0.469.0) -->
+  <script src="/lucide.min.js"></script>
 </head>
 <body>
  <!-- App-Shell — wird durch JavaScript gefüllt -->
@@ -24,6 +24,7 @@ const APP_SHELL = [
  '/api.js',
  '/router.js',
  '/sw-register.js',
+  '/lucide.min.js',
  '/styles/tokens.css',
  '/styles/reset.css',
  '/styles/layout.css',
@@ -34,10 +34,8 @@ app.use(helmet({
      defaultSrc: ["'self'"],
      scriptSrc: [
        "'self'",
-        // Alpine.js CDN
+        // Alpine.js CDN (optional, falls verwendet)
        'https://cdn.jsdelivr.net',
-        // Lucide Icons CDN
-        'https://unpkg.com',
      ],
      styleSrc: ["'self'", "'unsafe-inline'"],
      imgSrc: ["'self'", 'data:', 'https://openweathermap.org'],