openvibers/openvibe.report Commits

connect-src: allow https://openvibe.chat for the navbar's Messages count (openvibe-shared 4.130.0) (#122)

OP OpenVibers committed 7 days ago · 6647ce7000 · 1 file, +1 −1

Changes

ddiff --git a/server/app.js b/server/app.js
iindex 9de705c..2db627a 100644
---- a/server/app.js
++++ b/server/app.js
@@@ -155,7 +155,7 @@ async function createApp(opts = {}) {
                  // Cards show the readings' own pictures: a stream's thumbnail comes from Live and a post's screenshot
                  // from Community (the sources of the Rundown's takes), so both origins are allowed here and nowhere wider.
                  imgSrc: ["'self'", 'data:', 'https://openvibe.network', 'https://openvibe.media', 'https://openvibe.live', 'https://openvibe.community'],
--                connectSrc: ["'self'", 'https://openvibe.network', 'https://cloudflareinsights.com', 'https://openvibe.events'],
++                connectSrc: ["'self'", 'https://openvibe.network', 'https://openvibe.chat', 'https://cloudflareinsights.com', 'https://openvibe.events'],
                  frameSrc: ["'self'", 'https://openvibe.network'],
                  frameAncestors: ["'none'"],
                  objectSrc: ["'none'"],