openvibers/openvibe.today Commits

Allow Quest guide reads in page CSP (#165)

OP OpenVibers committed 2 days ago · b1813ee3f8 · 1 file, +1 −1

Changes

ddiff --git a/server/app.js b/server/app.js
iindex 3599cbd..d800799 100644
---- a/server/app.js
++++ b/server/app.js
@@@ -133,7 +133,7 @@ async function createApp(opts = {}) {
                  styleSrc: ["'self'", "'unsafe-inline'", 'https://openvibe.network', 'https://fonts.googleapis.com', 'https://cdnjs.cloudflare.com'],
                  fontSrc: ["'self'", 'data:', 'https://fonts.gstatic.com', 'https://cdnjs.cloudflare.com'],
                  imgSrc: ["'self'", 'data:', 'https://openvibe.network', 'https://openvibe.media'],
--                connectSrc: ["'self'", 'https://openvibe.network', 'https://openvibe.chat', 'https://cloudflareinsights.com', 'https://openvibe.events'],
++                connectSrc: ["'self'", 'https://openvibe.network', 'https://openvibe.quest', 'https://openvibe.chat', 'https://cloudflareinsights.com', 'https://openvibe.events'],
                  frameSrc: ["'self'", 'https://openvibe.network'],
                  frameAncestors: ["'none'"],
                  objectSrc: ["'none'"],