Update docs

Author: damienbod

CHANGELOG.md

@@ -1,5 +1,9 @@
 ## ASP.NET Core, Angular BFF using Microsoft Entra ID Changelog
 
+### 2025-10-31 1.0.3
+- Switch to Angular CLI and vite
+- Angular 20.3.0
+- 
 ### 2025-08-03 1.0.2
 - Updated packages
 - Angular 20.1.4

server/Program.cs

@@ -83,11 +83,8 @@
 app.UseSecurityHeaders();
 
 app.UseHttpsRedirection();
-
 app.UseStaticFiles();
-
 app.UseRouting();
-
 app.UseNoUnauthorizedRedirect("/api");
 
 app.UseAuthentication();

server/SecurityHeadersDefinitions.cs

@@ -38,7 +38,7 @@ public static HeaderPolicyCollection GetHeaderPolicyCollection(bool isDev, strin
                     builder.AddStyleSrc().WithNonce().UnsafeInline();
                 }
 
-                builder.AddScriptSrcElem().Self();
+                builder.AddScriptSrcElem().WithNonce().UnsafeInline();
                 builder.AddScriptSrc().WithNonce().UnsafeInline();
             })
             .RemoveServerHeader()