openvibers/openvibe.host Commits
connect-src: allow https://openvibe.chat for the navbar's Messages count (#319)
Changes
@@@ -44,7 +44,8 @@ const DASHBOARD_CSP_HEADER = Object.entries({'style-src': ["'self'", "'unsafe-inline'", 'https://openvibe.network', 'https://fonts.googleapis.com', 'https://cdnjs.cloudflare.com'],'font-src': ["'self'", 'data:', 'https://fonts.gstatic.com', 'https://cdnjs.cloudflare.com', 'https://openvibe.network'],'img-src': ["'self'", 'data:', 'https:'],-- 'connect-src': ["'self'", 'https://openvibe.network', 'https://openvibe.events', 'https://cloudflareinsights.com'],++ // The navbar's Messages count asks Chat (openvibe-shared 4.130.0).++ 'connect-src': ["'self'", 'https://openvibe.chat', 'https://openvibe.network', 'https://openvibe.events', 'https://cloudflareinsights.com'],'frame-src': ["'self'", 'https://openvibe.network'],'frame-ancestors': ["'none'"], 'object-src': ["'none'"], 'base-uri': ["'self'"],'form-action': ["'self'", 'https://openvibe.network'],
@@ -44,7 +44,8 @@ const DASHBOARD_CSP_HEADER = Object.entries({
@@ -44,7 +44,8 @@ const DASHBOARD_CSP_HEADER = Object.entries({
'style-src': ["'self'", "'unsafe-inline'", 'https://openvibe.network', 'https://fonts.googleapis.com', 'https://cdnjs.cloudflare.com'],
'style-src': ["'self'", "'unsafe-inline'", 'https://openvibe.network', 'https://fonts.googleapis.com', 'https://cdnjs.cloudflare.com'],
'font-src': ["'self'", 'data:', 'https://fonts.gstatic.com', 'https://cdnjs.cloudflare.com', 'https://openvibe.network'],
'font-src': ["'self'", 'data:', 'https://fonts.gstatic.com', 'https://cdnjs.cloudflare.com', 'https://openvibe.network'],
'img-src': ["'self'", 'data:', 'https:'],
'img-src': ["'self'", 'data:', 'https:'],
- 'connect-src': ["'self'", 'https://openvibe.network', 'https://openvibe.events', 'https://cloudflareinsights.com'],
+ // The navbar's Messages count asks Chat (openvibe-shared 4.130.0).
+ 'connect-src': ["'self'", 'https://openvibe.chat', 'https://openvibe.network', 'https://openvibe.events', 'https://cloudflareinsights.com'],
'frame-src': ["'self'", 'https://openvibe.network'],
'frame-src': ["'self'", 'https://openvibe.network'],
'frame-ancestors': ["'none'"], 'object-src': ["'none'"], 'base-uri': ["'self'"],
'frame-ancestors': ["'none'"], 'object-src': ["'none'"], 'base-uri': ["'self'"],
'form-action': ["'self'", 'https://openvibe.network'],
'form-action': ["'self'", 'https://openvibe.network'],