openvibers/openvibe.watch Commits

connect-src: allow https://openvibe.chat for the navbar's Messages count (openvibe-shared 4.130.0) (#228)

OP OpenVibers committed 6 days ago · f2c1506a3a · 1 file, +1 −1

Changes

ddiff --git a/server/app.js b/server/app.js
iindex e3f1909..8a86bd4 100644
---- a/server/app.js
++++ b/server/app.js
@@@ -59,7 +59,7 @@ const TEXT_INDEX = [
  const CSP = "default-src 'self'; script-src 'self' 'unsafe-inline' https://openvibe.network https://static.cloudflareinsights.com; "
      + "style-src 'self' 'unsafe-inline' https://openvibe.network https://fonts.googleapis.com https://cdnjs.cloudflare.com; "
      + "font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com; img-src 'self' data: https://openvibe.network https://openvibe.media; "
--    + "connect-src 'self' https://openvibe.network https://openvibe.events https://cloudflareinsights.com; "
++    + "connect-src 'self' https://openvibe.network https://openvibe.chat https://openvibe.events https://cloudflareinsights.com; "
      + "frame-src 'self' https://openvibe.network; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; form-action 'self' https://openvibe.network";
  
  async function createApp({ config, db, registry, check, observations, scheduler, auth, outbox, actions = null, now, log = console, limitsNow = null, sessions, keyStore, siteLimits, fetchImpl = globalThis.fetch, accountData = null, accountSend = null, eventSources = null, webhookSources = null, billing = null, providerRates = null, env = process.env, onConfigActivate = null, sharing = null }) {