fix csp for websockets (#7085)

ohcnetwork · Jan 23, 2024 · ed65ad3 · ed65ad3
1 parent 01bb090
commit ed65ad3
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/netlify.toml b/netlify.toml
@@ -28,7 +28,7 @@ status = 200
       default-src 'self';
       script-src 'self' 'nonce-f51b9742' https://plausible.10bedicu.in;
       style-src 'self' 'nonce-7e14cf80';
-      connect-src 'self' https://sentry.io https://plausible.10bedicu.in https://egov-s3-facility-10bedicu.s3.amazonaws.com https://egov-s3-patient-data-10bedicu.s3.amazonaws.com;
+      connect-src 'self' ws: wss: https://sentry.io https://plausible.10bedicu.in https://egov-s3-facility-10bedicu.s3.amazonaws.com https://egov-s3-patient-data-10bedicu.s3.amazonaws.com;
       img-src 'self' blob: data: https://cdn.coronasafe.network https://egov-s3-facility-10bedicu.s3.amazonaws.com https://egov-s3-patient-data-10bedicu.s3.amazonaws.com;
       media-src 'self' blob: data: https://cdn.coronasafe.network https://egov-s3-facility-10bedicu.s3.amazonaws.com https://egov-s3-patient-data-10bedicu.s3.amazonaws.com;
       object-src 'self' blob: https://egov-s3-facility-10bedicu.s3.amazonaws.com https://egov-s3-patient-data-10bedicu.s3.amazonaws.com;

diff --git a/vite.config.ts b/vite.config.ts
@@ -103,7 +103,7 @@ export default defineConfig({
       "Content-Security-Policy": `default-src 'self';\
       script-src 'self' 'nonce-f51b9742' https://plausible.10bedicu.in;\
       style-src 'self' 'nonce-7e14cf80';\
-      connect-src 'self' https://sentry.io https://plausible.10bedicu.in ${cdnUrls};\
+      connect-src 'self' ws: wss: https://sentry.io https://plausible.10bedicu.in ${cdnUrls};\
       img-src 'self' blob: data: https://cdn.coronasafe.network ${cdnUrls};\
       media-src 'self' blob: data: https://cdn.coronasafe.network ${cdnUrls};\
       object-src 'self' blob: ${cdnUrls};`,