connect-src: allow https://openvibe.chat for the navbar's Messages count (openvibe-shared 4.130.0) (#351)

OP OpenVibers committed 6 days ago · 9d601d970d · 1 file, +1 −1

Changes

ddiff --git a/server/home.js b/server/home.js
iindex 12ba5cf..ac2b271 100644
---- a/server/home.js
++++ b/server/home.js
@@@ -36,7 +36,7 @@ const HOME_CSP = [
      "style-src 'self' 'unsafe-inline' https://openvibe.network https://fonts.googleapis.com https://cdnjs.cloudflare.com",
      "font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com",
      "img-src 'self' data: https:",
--    "connect-src 'self' https://openvibe.network https://openvibe.events https://cloudflareinsights.com",
++    "connect-src 'self' https://openvibe.network https://openvibe.chat https://openvibe.events https://cloudflareinsights.com",
      "frame-src 'self' https://openvibe.network",
      "frame-ancestors 'none'",
      "object-src 'none'",