openvibers/openvibe.design Commits

connect-src: allow https://openvibe.chat for the navbar's Messages count (openvibe-shared 4.130.0) (#179)

OP OpenVibers committed 6 days ago · 1d7ac49d9a · 1 file, +1 −1

Changes

ddiff --git a/server/app.js b/server/app.js
iindex 447259e..1de1844 100644
---- a/server/app.js
++++ b/server/app.js
@@@ -140,7 +140,7 @@ async function createApp(opts = {}) {
                  // Theme previews may carry inline data: images and any https image the catalogue references.
                  imgSrc: ["'self'", 'data:', 'https:'],
                  // The footer's release line hears OpenVibe.Events; Cloudflare's beacon reports page timings.
--                connectSrc: ["'self'", 'https://openvibe.network', 'https://cloudflareinsights.com', 'https://openvibe.events'],
++                connectSrc: ["'self'", 'https://openvibe.network', 'https://openvibe.chat', 'https://cloudflareinsights.com', 'https://openvibe.events'],
                  // 'self' covers the Arena's about:srcdoc iframes; generated pages cannot navigate the top window.
                  frameSrc: ["'self'", 'https://openvibe.network', ...turnstileSrc, ...benchRender],
                  frameAncestors: ["'none'"],