🐛 Fix CSP (#2840)

ViewTube · Jun 15, 2024 · bb58f03 · bb58f03
1 parent d63bfab
commit bb58f03
Show file tree

Hide file tree

Showing 5 changed files with 12 additions and 7 deletions.
diff --git a/.github/workflows/build-workflow.yml b/.github/workflows/build-workflow.yml
@@ -29,7 +29,7 @@ jobs:
       group: ${{ github.workflow }}-${{ github.ref }}
       cancel-in-progress: true
 
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
 
     steps:
       - name: Checkout

diff --git a/.github/workflows/create-release-workflow.yml b/.github/workflows/create-release-workflow.yml
@@ -7,7 +7,7 @@ jobs:
   create-release:
     name: Create Release
 
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
 
     steps:
       - name: Checkout

diff --git a/.github/workflows/pr-workflow.yml b/.github/workflows/pr-workflow.yml
@@ -12,7 +12,7 @@ jobs:
 
     name: ${{ matrix.command }}
     timeout-minutes: 60
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
 
     steps:
       - name: Checkout
@@ -58,7 +58,7 @@ jobs:
 
   e2e:
     name: e2e tests
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       - name: Checkout
         uses: actions/checkout@v4

diff --git a/.github/workflows/test-workflow.yml b/.github/workflows/test-workflow.yml
@@ -9,7 +9,7 @@ jobs:
   e2e:
     name: daily e2e tests
     timeout-minutes: 60
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
 
     steps:
       - name: Checkout

diff --git a/server/src/main.ts b/server/src/main.ts
@@ -92,8 +92,13 @@ const bootstrap = async () => {
         useDefaults: true,
         directives: {
           defaultSrc: [`'self'`, `blob:`, `data:`],
-          scriptSrc: [`'self'`, `blob:`, `https: 'unsafe-eval'`, `https: 'unsafe-inline'`],
-          connectSrc: [`'self'`, '*.viewtube.io'],
+          scriptSrc: [
+            `'self'`,
+            `blob:`,
+            `https: 'unsafe-eval'`,
+            `https: 'unsafe-inline'`,
+            '*.viewtube.io'
+          ],
           scriptSrcAttr: null
         }
       }