fix(csp): habitica.com isn't *.habitica.com

2026-04-07 16:00:36 -05:00
parent b3fac011a9
commit 80e4b8617a
1 changed files with 2 additions and 0 deletions
@@ -71,6 +71,7 @@ export default function attachMiddlewares (app, server) {
    contentSecurityPolicy: {
      directives: {
        defaultSrc: [
+          'habitica.com',
          '*.habitica.com',
          '*.amazon.com',
          '*.amazonaws.com',
@@ -85,6 +86,7 @@ export default function attachMiddlewares (app, server) {
          'data:',
        ],
        scriptSrc: [
+          'habitica.com',
          '*.habitica.com',
          '*.amazon.com',
          '*.amazonaws.com',