add hosted edge to allowed connect-src

2025-07-07 01:16:28 +02:00 · 2025-04-10 09:24:26 +02:00 · 2025-04-10 09:24:26 +02:00 · 311d75be28
commit 311d75be28
parent e63b28c1b8
1 changed files with 1 additions and 0 deletions
--- a/src/lib/middleware/secure-headers.ts
+++ b/src/lib/middleware/secure-headers.ts
@ -60,6 +60,7 @@ const secureHeaders: (config: IUnleashConfig) => RequestHandler = (config) => {
                        'gravatar.com',
                        'europe-west3-metrics-304612.cloudfunctions.net',
                        'app.unleash-hosted.com',
+                        'hosted.edge.getunleash.io',
                        ...config.additionalCspAllowedDomains.connectSrc,
                    ],
                    mediaSrc: [