fix: broken layout on Tor instances

added a new flag to optionally disable 'upgrade-insecure'requests' CSP directive which caused the breakage.

.env.example

@@ -7,3 +7,5 @@ CACHE_PERIOD=1h # duration for which static files' cached copies are valid in th
 #user agent and accept header that quora will see
 #AXIOS_USER_AGENT='axios/0.26.1'
 #AXIOS_ACCEPT='application/json, text/plain, */*'
+# add any value here (e.g.: 1, true, 'por favor') if you're using any service where http is the preferred method, else leave it blank
+NO_UPGRADE=

app.js

@@ -24,6 +24,8 @@ app.use(
     contentSecurityPolicy: {
       directives: {
         'script-src': ["'self'", 'cdn.jsdelivr.net'],
+        'block-all-mixed-content': null, // deprecated.
+        'upgrade-insecure-requests': process.env.NO_UPGRADE ? null : [],
       },
     },
     crossOriginEmbedderPolicy: false,