openvibers/openvibe.community Commits

Allow Quest guide reads in page CSP (#377)

OP OpenVibers committed 2 days ago · e057169f9b · 1 file, +1 −1

Changes

ddiff --git a/server/app.js b/server/app.js
iindex f22983d..9d99e2c 100644
---- a/server/app.js
++++ b/server/app.js
@@@ -115,7 +115,7 @@ async function createApp(opts = {}) {
                  fontSrc: ["'self'", 'https://fonts.gstatic.com', 'data:'],
                  // Screenshots serve from openvibe.media (which may 302 to object storage); avatars from Live/Network.
                  imgSrc: ["'self'", 'data:', 'blob:', 'https:'],
--                connectSrc: ["'self'", 'https://openvibe.network', 'https://openvibe.chat', 'https://openvibe.live', 'https://openvibe.media', 'https://openvibe.events', 'https://inventory.openvibe.network', 'https://cloudflareinsights.com'],   // inventory: what people wear (items.js)
++                connectSrc: ["'self'", 'https://openvibe.network', 'https://openvibe.quest', 'https://openvibe.chat', 'https://openvibe.live', 'https://openvibe.media', 'https://openvibe.events', 'https://inventory.openvibe.network', 'https://cloudflareinsights.com'],   // inventory: what people wear (items.js)
                  // The Network's hidden /sso/check frame: how a visitor who is signed in elsewhere gets signed in here.
                  frameSrc: ["'self'", 'https://openvibe.network'],
                  frameAncestors: ["'self'"],