Allow Google sign-in through CSP and show a first-comment empty state.

Author: Llewellyn500

components/CommentsSection.tsx

@@ -1896,7 +1896,7 @@ export default function CommentsSection({
 
       {!loading && !error && displayComments.length === 0 ? (
         <p className="border-b border-white/30 py-8 text-white/50">
-          No comments yet.
+          Be the first to comment.
         </p>
       ) : null}
 

next.config.js

@@ -1,12 +1,12 @@
 const contentSecurityPolicy = [
   "default-src 'self'",
-  "script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.gstatic.com https://apis.google.com",
+  "script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.gstatic.com https://apis.google.com https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/",
   "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com",
   "font-src 'self' data: https://fonts.gstatic.com",
   "img-src 'self' data: blob: https:",
   "media-src 'self' https:",
-  "connect-src 'self' https://*.googleapis.com https://*.firebaseio.com wss://*.firebaseio.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com",
-  "frame-src https://www.youtube.com https://www.youtube-nocookie.com https://accounts.google.com https://*.firebaseapp.com https://www.google.com/recaptcha/",
+  "connect-src 'self' https://*.googleapis.com https://*.firebaseio.com wss://*.firebaseio.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://www.google.com https://www.recaptcha.net https://auth.lap.onl https://*.cloudfunctions.net https://*.run.app",
+  "frame-src https://www.youtube.com https://www.youtube-nocookie.com https://accounts.google.com https://*.firebaseapp.com https://auth.lap.onl https://www.google.com/recaptcha/ https://recaptcha.google.com https://www.recaptcha.net",
   "worker-src 'self' blob:",
   "frame-ancestors 'none'",
   "base-uri 'self'",