From 5f1097770596be802c150f669c6bb73a409e78d0 Mon Sep 17 00:00:00 2001
From: OpenClaw <openclawd@docfast.dev>
Date: Sat, 14 Feb 2026 22:27:15 +0000
Subject: [PATCH] fix: move Swagger init to external JS (CSP compliance)

---
 public/docs.html       | 21 +--------------------
 public/swagger-init.js | 18 ++++++++++++++++++
 2 files changed, 19 insertions(+), 20 deletions(-)
 create mode 100644 public/swagger-init.js

diff --git a/public/docs.html b/public/docs.html
index 26d0a6a..0e6db53 100644
--- a/public/docs.html
+++ b/public/docs.html
@@ -104,25 +104,6 @@
   <a href="/" class="back-link">← Back to docfast.dev</a>
   <div id="swagger-ui"></div>
   <script src="/swagger-ui/swagger-ui-bundle.js"></script>
-  <script>
-    SwaggerUIBundle({
-      url: '/openapi.json',
-      dom_id: '#swagger-ui',
-      deepLinking: true,
-      presets: [
-        SwaggerUIBundle.presets.apis,
-        SwaggerUIBundle.SwaggerUIStandalonePreset
-      ],
-      layout: 'BaseLayout',
-      defaultModelsExpandDepth: 1,
-      defaultModelExpandDepth: 2,
-      docExpansion: 'list',
-      filter: true,
-      tryItOutEnabled: true,
-      requestSnippetsEnabled: true,
-      persistAuthorization: true,
-      syntaxHighlight: { theme: 'monokai' }
-    });
-  </script>
+  <script src="/swagger-init.js"></script>
 </body>
 </html>
diff --git a/public/swagger-init.js b/public/swagger-init.js
new file mode 100644
index 0000000..45d7c89
--- /dev/null
+++ b/public/swagger-init.js
@@ -0,0 +1,18 @@
+SwaggerUIBundle({
+  url: "/openapi.json",
+  dom_id: "#swagger-ui",
+  deepLinking: true,
+  presets: [
+    SwaggerUIBundle.presets.apis,
+    SwaggerUIBundle.SwaggerUIStandalonePreset
+  ],
+  layout: "BaseLayout",
+  defaultModelsExpandDepth: 1,
+  defaultModelExpandDepth: 2,
+  docExpansion: "list",
+  filter: true,
+  tryItOutEnabled: true,
+  requestSnippetsEnabled: true,
+  persistAuthorization: true,
+  syntaxHighlight: { theme: "monokai" }
+});