🔧 fix: update connect-src CSP directive to include api.github.com for additional API endpoint access

This commit is contained in:
Kiril Videlov 2023-10-16 09:26:25 +02:00 committed by Kiril Videlov
parent a2b699700b
commit d6edbc2187
3 changed files with 3 additions and 3 deletions

View File

@ -57,7 +57,7 @@
"csp": {
"default-src": "'self'",
"img-src": "'self' asset: https://asset.localhost data: https://www.gravatar.com tauri://localhost https://avatars.githubusercontent.com",
"connect-src": "'self' https://eu.posthog.com https://app.gitbutler.com https://o4504644069687296.ingest.sentry.io ws://localhost:7703 https://github.com",
"connect-src": "'self' https://eu.posthog.com https://app.gitbutler.com https://o4504644069687296.ingest.sentry.io ws://localhost:7703 https://github.com https://api.github.com",
"script-src": "'self' https://eu.posthog.com",
"style-src": "'self' 'unsafe-inline'"
}

View File

@ -20,7 +20,7 @@
"csp": {
"default-src": "'self'",
"img-src": "'self' asset: https://asset.localhost data: https://www.gravatar.com tauri://localhost https://avatars.githubusercontent.com",
"connect-src": "'self' https://eu.posthog.com https://app.gitbutler.com https://o4504644069687296.ingest.sentry.io ws://localhost:7703 https://github.com",
"connect-src": "'self' https://eu.posthog.com https://app.gitbutler.com https://o4504644069687296.ingest.sentry.io ws://localhost:7703 https://github.com https://api.github.com",
"script-src": "'self' https://eu.posthog.com",
"style-src": "'self' 'unsafe-inline'"
}

View File

@ -20,7 +20,7 @@
"csp": {
"default-src": "'self'",
"img-src": "'self' asset: https://asset.localhost data: https://www.gravatar.com tauri://localhost https://avatars.githubusercontent.com",
"connect-src": "'self' https://eu.posthog.com https://app.gitbutler.com https://o4504644069687296.ingest.sentry.io ws://localhost:7703 https://github.com",
"connect-src": "'self' https://eu.posthog.com https://app.gitbutler.com https://o4504644069687296.ingest.sentry.io ws://localhost:7703 https://github.com https://api.github.com",
"script-src": "'self' https://eu.posthog.com",
"style-src": "'self' 'unsafe-inline'"
}