Skip to content

Commit 2b2b8d6

Browse files
committed
Allow any connect-src in CSP
Managing these for all the integrations seems like a lot of effort
1 parent d51da8c commit 2b2b8d6

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

app.js

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -145,7 +145,7 @@ if (config.csp.enable) {
145145
fontSrc: ['\'self\'', 'https://public.slidesharecdn.com'],
146146
objectSrc: ['*'], // Chrome PDF viewer treats PDFs as objects :/
147147
childSrc: ['*'],
148-
connectSrc: ['\'self\'', 'https://links.services.disqus.com', 'wss://realtime.services.disqus.com']
148+
connectSrc: ['*']
149149
};
150150
var cdnDirectives = {
151151
scriptSrc: ['https://cdnjs.cloudflare.com', 'https://cdn.mathjax.org'],

0 commit comments

Comments
 (0)