openvibers/openvibe.host Commits

connect-src: allow https://openvibe.chat for the navbar's Messages count (#319)

OP OpenVibers committed 6 days ago · 84bf7e5d37 · 1 file, +2 −1

Changes

ddiff --git a/server/app.js b/server/app.js
iindex 2432f62..9d83da2 100644
---- a/server/app.js
++++ b/server/app.js
@@@ -44,7 +44,8 @@ const DASHBOARD_CSP_HEADER = Object.entries({
'style-src': ["'self'", "'unsafe-inline'", 'https://openvibe.network', 'https://fonts.googleapis.com', 'https://cdnjs.cloudflare.com'],
'font-src': ["'self'", 'data:', 'https://fonts.gstatic.com', 'https://cdnjs.cloudflare.com', 'https://openvibe.network'],
'img-src': ["'self'", 'data:', 'https:'],
-- 'connect-src': ["'self'", 'https://openvibe.network', 'https://openvibe.events', 'https://cloudflareinsights.com'],
++ // The navbar's Messages count asks Chat (openvibe-shared 4.130.0).
++ 'connect-src': ["'self'", 'https://openvibe.chat', 'https://openvibe.network', 'https://openvibe.events', 'https://cloudflareinsights.com'],
'frame-src': ["'self'", 'https://openvibe.network'],
'frame-ancestors': ["'none'"], 'object-src': ["'none'"], 'base-uri': ["'self'"],
'form-action': ["'self'", 'https://openvibe.network'],