1
0
mirror of https://github.com/Unleash/unleash.git synced 2025-07-12 13:48:35 +02:00

add hosted edge to allowed connect-src

This commit is contained in:
Ivar Conradi Østhus 2025-04-10 09:24:26 +02:00
parent e63b28c1b8
commit 311d75be28
No known key found for this signature in database
GPG Key ID: 14F51E4841AF1DE1

View File

@ -60,6 +60,7 @@ const secureHeaders: (config: IUnleashConfig) => RequestHandler = (config) => {
'gravatar.com', 'gravatar.com',
'europe-west3-metrics-304612.cloudfunctions.net', 'europe-west3-metrics-304612.cloudfunctions.net',
'app.unleash-hosted.com', 'app.unleash-hosted.com',
'hosted.edge.getunleash.io',
...config.additionalCspAllowedDomains.connectSrc, ...config.additionalCspAllowedDomains.connectSrc,
], ],
mediaSrc: [ mediaSrc: [