connect-src: allow https://openvibe.chat for the navbar's Messages count (#234)

OP OpenVibers committed 6 days ago · 259f57663e · 1 file, +2 −1

Changes

ddiff --git a/server/app.js b/server/app.js
iindex d131304..4176777 100644
---- a/server/app.js
++++ b/server/app.js
@@@ -55,7 +55,8 @@ function createApp({ config, telemetry = null, svc, viewers: baseViewers, platfo
              "font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com",
              "img-src 'self' data: https:",
              // openvibe.events: release notifications (release-watch's EventSource, openvibe-shared 1.17).
--            "connect-src 'self' https://openvibe.network https://cloudflareinsights.com https://openvibe.events",
++            // The navbar's Messages count asks Chat (openvibe-shared 4.130.0).
++            "connect-src 'self' https://openvibe.chat https://openvibe.network https://cloudflareinsights.com https://openvibe.events",
              "frame-src 'self' https://openvibe.network",
              "frame-ancestors 'self'",
              "form-action 'self' https://openvibe.network",