openvibers/openvibe.network Commits

Bootstrap Compare's exact first-party origin (#808)

OP OpenVibers committed 2 days ago · e74fd26d2d · 2 files, +5 −0

Changes

ddiff --git a/server/first-party-origins.js b/server/first-party-origins.js
iindex 28012579..6383aaf3 100644
---- a/server/first-party-origins.js
++++ b/server/first-party-origins.js
@@@ -24,6 +24,8 @@ function manifestOrigins() {
}
// Bootstrap Computer's exact origin until its service manifest is included in this service's Contracts pin.
out.add('https://openvibe.computer');
++ // Compare launches before its separately held Contracts release. Keep this exact origin.
++ out.add('https://openvibe.compare');
cached = out;
return out;
}
ddiff --git a/test/first-party-origins.test.js b/test/first-party-origins.test.js
iindex b717af0a..f2547c1f 100644
---- a/test/first-party-origins.test.js
++++ b/test/first-party-origins.test.js
@@@ -6,6 +6,9 @@ const assert = require('assert');
const { manifestOrigins } = require('../server/first-party-origins');
const o = manifestOrigins();
++assert(o.has('https://openvibe.compare'), 'Compare frame reads work while its Contracts release is held');
++assert(!o.has('https://tenant.openvibe.compare'));
++assert(!o.has('https://openvibe.compare.evil.example'));
assert(o.has('https://openvibe.computer'), 'Computer is allowed for Network signed-in navbar calls before the Contracts pin lands');
for (const want of ['https://openvibe.blog', 'https://openvibe.wiki', 'https://openvibe.codes', 'https://search.openvibe.network', 'https://openvibe.live', 'https://my.openvibe.network', 'https://openvibe.party']) {
assert.ok(o.has(want), `${want} is a first-party origin`);