openvibers/openvibe.mediahub Commits

Allow Quest guide reads in page CSP (#398)

OP OpenVibers committed 2 days ago · c2f02f889b · 1 file, +1 −1

* Allow Quest guide reads in page CSP

* Merge remote-tracking branch 'origin/main' into quest-guide-csp-mediahub-1111

Changes

ddiff --git a/server/app.js b/server/app.js
iindex e8282e1..d6e5ee3 100644
---- a/server/app.js
++++ b/server/app.js
@@@ -139,7 +139,7 @@ async function createApp(opts = {}) {
                  mediaSrc: ["'self'", 'blob:', ...MEDIA_ORIGINS],
                  // The watch page counts a view on OpenVibe.Live with a beacon (Live's /api/views).
                  // The navbar's Messages count asks Chat (openvibe-shared 4.130.0).
--                connectSrc: ["'self'", 'https://openvibe.community', 'https://openvibe.chat', 'https://openvibe.network', 'https://cloudflareinsights.com', 'https://openvibe.events', ...MEDIA_ORIGINS, liveOrigin],
++                connectSrc: ["'self'", 'https://openvibe.community', 'https://openvibe.chat', 'https://openvibe.network', 'https://openvibe.quest', 'https://cloudflareinsights.com', 'https://openvibe.events', ...MEDIA_ORIGINS, liveOrigin],
                  frameSrc: ["'self'", 'https://openvibe.network'],
                  frameAncestors: ["'none'"],
                  objectSrc: ["'none'"],