fix(CSP): more Amazon domains

2025-12-13 04:37:36 +01:00 · 2025-12-12 17:27:50 -06:00
parent 985b86c29a
commit cc6a35e61d
1 changed files with 2 additions and 0 deletions
--- a/website/server/middlewares/index.js
+++ b/website/server/middlewares/index.js
@@ -70,6 +70,7 @@ export default function attachMiddlewares (app, server) {
      directives: {
        defaultSrc: [
          '*.habitica.com',
+          '*.amazon.com',
          '*.amazonaws.com',
          '*.loggly.com',
          '*.payments-amazon.com',
@@ -84,6 +85,7 @@ export default function attachMiddlewares (app, server) {
          '\'unsafe-eval\'',
          '\'unsafe-inline\'',
          '*.habitica.com',
+          '*.amazon.com',
          '*.amazonaws.com',
          '*.loggly.com',
          '*.payments-amazon.com',