openvibers/openvibe.reviews Commits

connect-src: allow https://openvibe.chat for the navbar's Messages count (#231)

OP OpenVibers committed 6 days ago · 197ec4ebfd · 1 file, +2 −1

Changes

ddiff --git a/server/app.js b/server/app.js
iindex 2518d82..a169fec 100644
---- a/server/app.js
++++ b/server/app.js
@@@ -103,7 +103,8 @@ function createApp({ config, telemetry = null, svc, viewers, platform, sources,
              "font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com",
              "img-src 'self' data: https:",
              // openvibe.events: release notifications (release-watch's EventSource, openvibe-shared 1.17).
--            "connect-src 'self' https://openvibe.network https://openvibe.events https://cloudflareinsights.com",
++            // The navbar's Messages count asks Chat (openvibe-shared 4.130.0).
++            "connect-src 'self' https://openvibe.chat https://openvibe.network https://openvibe.events https://cloudflareinsights.com",
              "frame-src 'self' https://openvibe.network",
              "frame-ancestors 'self'",
              "form-action 'self' https://openvibe.network",