openvibers/openvibe.community Commits

connect-src: allow https://openvibe.chat for the navbar's Messages count (openvibe-shared 4.130.0) (#285)

OP OpenVibers committed 6 days ago · db911f3d83 · 1 file, +1 −1

Changes

ddiff --git a/server/app.js b/server/app.js
iindex 4550167..cf58d6e 100644
---- a/server/app.js
++++ b/server/app.js
@@@ -114,7 +114,7 @@ async function createApp(opts = {}) {
                  fontSrc: ["'self'", 'https://fonts.gstatic.com', 'data:'],
                  // Screenshots serve from openvibe.media (which may 302 to object storage); avatars from Live/Network.
                  imgSrc: ["'self'", 'data:', 'blob:', 'https:'],
--                connectSrc: ["'self'", 'https://openvibe.network', 'https://openvibe.live', 'https://openvibe.media', 'https://openvibe.events', 'https://inventory.openvibe.network', 'https://cloudflareinsights.com'],   // inventory: what people wear (items.js)
++                connectSrc: ["'self'", 'https://openvibe.network', 'https://openvibe.chat', 'https://openvibe.live', 'https://openvibe.media', 'https://openvibe.events', 'https://inventory.openvibe.network', 'https://cloudflareinsights.com'],   // inventory: what people wear (items.js)
                  // The Network's hidden /sso/check frame: how a visitor who is signed in elsewhere gets signed in here.
                  frameSrc: ["'self'", 'https://openvibe.network'],
                  frameAncestors: ["'self'"],