connect-src: allow https://openvibe.chat for the navbar's Messages count (openvibe-shared 4.130.0) (#194)

OP OpenVibers committed 6 days ago · d294e0590b · 1 file, +1 −1

Changes

ddiff --git a/server/web/home.js b/server/web/home.js
iindex 0281b95..fa2b34e 100644
---- a/server/web/home.js
++++ b/server/web/home.js
@@@ -34,7 +34,7 @@ const HOME_CSP = [
      "font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com https://openvibe.network",
      "img-src 'self' data: https:",
      // The navbar asks the Network for the session, menus and notifications.
--    "connect-src 'self' https://openvibe.network https://openvibe.events https://cloudflareinsights.com",
++    "connect-src 'self' https://openvibe.network https://openvibe.chat https://openvibe.events https://cloudflareinsights.com",
      "frame-src 'self' https://openvibe.network",
      "frame-ancestors 'none'",
      "object-src 'none'",