openvibers/openvibe.tools Commits

connect-src: allow https://openvibe.chat for the navbar's Messages count (openvibe-shared 4.130.0) (#233)

OP OpenVibers committed 6 days ago · 36d86fbb25 · 1 file, +1 −1

Changes

ddiff --git a/apps/yt/server/index.js b/apps/yt/server/index.js
iindex 95dd363..d918bfa 100644
---- a/apps/yt/server/index.js
++++ b/apps/yt/server/index.js
@@@ -84,7 +84,7 @@ app.use(helmet({
              fontSrc: ["'self'", "https://fonts.gstatic.com"],
              imgSrc: ["'self'", "data:", "https://i.ytimg.com", "https://img.youtube.com", "https://*.ggpht.com", "https://openvibe.network", "https://openvibe.media"],
              // openvibe.events: release notifications (release-watch's EventSource, openvibe-shared 2.13.0).
--            connectSrc: ["'self'", "https://openvibe.network", "https://openvibe.tools", "https://*.openvibe.tools", "https://cloudflareinsights.com", "https://openvibe.events"],
++            connectSrc: ["'self'", "https://openvibe.network", "https://openvibe.chat", "https://openvibe.tools", "https://*.openvibe.tools", "https://cloudflareinsights.com", "https://openvibe.events"],
              frameSrc: ["https://openvibe.network"], // the hidden /sso/check sign-in probe
              scriptSrcAttr: ["'unsafe-inline'"],
          },