Benature/omnivore
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #2383 from omnivore-app/fix/csp

Browse Source 
allow redirect to pocket auth page
This commit is contained in:
Jackson Harper
2023-06-19 20:21:14 +08:00
committed by GitHub
parent d2567e5c09 a0a5c4d57f
commit 8e888cbaa6
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
packages/web/next.config.js
View File

@ -4,7 +4,7 @@ const ContentSecurityPolicy = `
block-all-mixed-content;
connect-src 'self' ${process.env.NEXT_PUBLIC_SERVER_BASE_URL} proxy-prod.omnivore-image-cache.app proxy-demo.omnivore-image-cache.app storage.googleapis.com api.segment.io cdn.segment.com widget.intercom.io api-iam.intercom.io wss://nexus-websocket-a.intercom.io platform.twitter.com;
font-src 'self' data: cdn.jsdelivr.net;
form-action 'self' ${process.env.NEXT_PUBLIC_SERVER_BASE_URL};
form-action 'self' ${process.env.NEXT_PUBLIC_SERVER_BASE_URL} https://getpocket.com/auth/authorize;
frame-ancestors 'none';
frame-src self accounts.google.com platform.twitter.com www.youtube.com www.youtube-nocookie.com;
manifest-src 'self';