Anon/pleroma
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

keep the websocket url for all modes

Browse Source
This commit is contained in:
Henry Jameson 2023-05-07 15:34:17 +03:00
parent f50fd9278f
commit 2a07411b0c
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
lib/pleroma/web/plugs/http_security_plug.ex
View File

@ -93,7 +93,7 @@ defmodule Pleroma.Web.Plugs.HTTPSecurityPlug do
img_src = "img-src 'self' data: blob:"
media_src = "media-src 'self'"
connect_src = "connect-src 'self' blob:"
connect_src = ["connect-src 'self' blob: ", ?\s, websocket_url]
# Strict multimedia CSP enforcement only when MediaProxy is enabled
{img_src, media_src, connect_src} =
@ -103,7 +103,7 @@ defmodule Pleroma.Web.Plugs.HTTPSecurityPlug do
{
[img_src, sources],
[media_src, sources],
[connect_src, sources, ?\s, websocket_url]
[connect_src, sources]
}
else
{