openvibers/openvibe.actor Commits

connect-src: allow https://openvibe.chat for the navbar's Messages count (#313)

OP OpenVibers committed 6 days ago · 4925511035 · 1 file, +2 −1

Changes

ddiff --git a/server/app.js b/server/app.js
iindex 2b868a6..0d69600 100644
---- a/server/app.js
++++ b/server/app.js
@@@ -207,7 +207,8 @@ async function createApp(opts = {}) {
                  styleSrc: ["'self'", "'unsafe-inline'", 'https://openvibe.network', 'https://fonts.googleapis.com', 'https://cdnjs.cloudflare.com'],
                  fontSrc: ["'self'", 'data:', 'https://fonts.gstatic.com', 'https://cdnjs.cloudflare.com'],
                  imgSrc: ["'self'", 'data:', 'https://openvibe.network', 'https://openvibe.media'],
--                connectSrc: ["'self'", 'https://openvibe.network', 'https://cloudflareinsights.com', 'https://openvibe.events'],
++                // The navbar's Messages count asks Chat (openvibe-shared 4.130.0).
++                connectSrc: ["'self'", 'https://openvibe.chat', 'https://openvibe.network', 'https://cloudflareinsights.com', 'https://openvibe.events'],
                  // Bot's watch links: a chat turn frames the desk the agent works on, live (plan L55 C1b).
                  frameSrc: ["'self'", 'https://openvibe.network', ...(() => { try { return [new URL(config.services.botPublicUrl).origin]; } catch { return []; } })()],
                  frameAncestors: ["'none'"],