JakeHillion/storj
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

satellite/console: add storjshare.io domain to media-src CSP whitelist

Browse Source 
WHAT:
whitelist .storjshare.io domain for media-src CSP

WHY:
to enable video preview for linksharing

Change-Id: Ib673602d31ca116e7ce1cee0eba17099a55d7dbc
This commit is contained in:
Vitalii Shpital 2021-04-23 16:11:35 +03:00
parent a2e20c93ae
commit d32515fa5d
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
satellite/console/consoleweb/server.go
View File

@ -292,6 +292,7 @@ func (server *Server) appHandler(w http.ResponseWriter, r *http.Request) {
"frame-ancestors " + server.config.FrameAncestors,
"frame-src 'self' *.stripe.com",
"img-src 'self' data: *.customer.io *.tardigradeshare.io *.storjshare.io",
"media-src 'self' *.storjshare.io",
"script-src 'sha256-wAqYV6m2PHGd1WDyFBnZmSoyfCK0jxFAns0vGbdiWUA=' 'self' *.stripe.com cdn.segment.com *.customer.io",
}